Interestingly, the PIN or fingerprint never actually leaves your computer by cross-checking both private and public keys, Microsoft can verify a user's identity without needing to send that information across the internet.Īs such, security keys are nearly foolproof – unless you lose one, or forget to bring it with you, of course.

When activated, a FIDO 2 generates unique, encrypted key numbers that Microsoft can verify. (Some keys also have NFC chips to work with smartphones.) The key itself is a small USB dongle that you can plug into any computer. If you've never considered using a security key before, it offers a number of advantages. Windows Hello also lets you unlock a PC's screen, which the security key won't do.) (Microsoft also points out that you can log into Microsoft accounts on Edge with Windows Hello fingerprint or facial recognition on compliant PCs, but that feature is not new. To be fair, Google is one of the lead developers of the FIDO 2 standard Microsoft just got its implementation to market faster than Google's, which is still in beta phase. From there, just follow the instructions on the page, and Microsoft will let you use your security key to bypass your password when signing into Microsoft online accounts from now on.įIDO 2 security keys offer either a fingerprint reader or a PIN login which one you activate depends on your key model and your preferences. (Yes, you still need a password to set this up the end of passwords as we know them hasn't arrived just yet.)Ĭlick on Security, then More security options, and locate the section entitled Windows Hello and security keys.

Then, log into your Microsoft account page (opens in new tab) in Edge, using your Microsoft username and password. If you have a security key and want to try it out for yourself, here's how it works: First, update Windows 10 to the October 2018 Update, if you haven't already.

Windows 10 fido key