Windows 10: How do I set up my Yubikey so that its a WINDOWS HELLO feature? PLEASE HELP!

Hello, I am struggling with regards to enabling my physical key as a log in feature to Windows. I believe I have gone passwordless, but can someone please help me because when i insert the key and authenticate, the only options on screen to set up are change pin or reset key. There's no feature to actively enable the key as a method of inserting when i launch windows and authenticate this way. Am I right in thinking this should be a feature with the Microsoft move to passwordless? Please can someone help me because all videos do not help. I'm certain my machine is capable.

:)

 

When I register my yubo yubikey on my windows laptop don't I have to use the yubikey on my computer.

Hi, Howard_35_78

Welcome to the MicroSoft Community.



Yes, you must first register your YubiKey with your Outlook.com account, irrespective of whether you are using a local or an administrator account on your computer. Here’s how you can set it up:

1. Enable Two-Step Verification:
   
   • Log into your Outlook.com account.
     
   • Go to ‘Security Settings’ and enable ‘Two-step Verification’.
     
2. Add YubiKey as a Security Key:
   
   • In the ‘Security Basics’ page, click on ‘More Security Options’.
     
   • Under the ‘Windows Hello and Security Keys’ section, click on ‘Set up a Security key’.
     
   • Follow the prompts to add your YubiKey as a security key.
     

After these steps, you can use your YubiKey to authenticate yourself when logging into your Outlook.com account from any computer. When you insert your YubiKey into a USB port and touch the button on the YubiKey, it generates a one-time password to authenticate your login. This means that you don’t have to remember a password, making your account more secure against phishing and other attacks.

The YubiKey 5C NFC works with both local and administrator accounts and can be used to secure a wide range of online services that support FIDO U2F or FIDO2 protocols, including Microsoft accounts. Remember, it’s always recommended to have a backup login method (like a secondary email, phone number, or another security key) in case you lose your YubiKey.



If there is anything not clear or I can't understand your problem, please do not hesitate to let me know.



Best Regards

Martin | Microsoft Community Support Specialist

 

Yubikey login support

Hi,

Log in issues can be caused by invalid password or username. For us to assist you further, kindly answer the questions below:

• What troubleshooting steps have you done so far?
• Have you made any recent changes before this issue occur?
• Have you tried using Yubikey before?

We're looking forward for your response.

 

Windows 10 1909 breaks Windows Hello with YubiKey 4

Hi. Been using Windows 10 ever since it came out. Windows Hello with YubiKey 4 never had a problem. All updates to 1903 were fine but then, recently I upgraded to 1909 because someone suggested that might fix an issue I had with Your Phone companion.

Now, Windows Hello no longer works with YubiKey 4. Windows security key sign-In management refuses to recognize that its a valid security key.

To eliminate the possibility that the key has somehow gone bad, I jumped onto the Yubico website and downloaded Yubico Client for Windows and the key is recognized fine and validated working with that client. I would have stuck with that client but it doesn't
have the convenience of Windows Hello.

After uninstalling the Yubico client, I went about to try a standard
Yubico Security Key. This worked fine.

I am now suspecting that Microsoft has removed support for FIDO U2F from Windows Hello security key functionality and replaced it with a FIDO2 implementation (instead of supporting both) because that is the only significant difference. YubiKey 4 also supports
a number of other authentication standards such as OTP, OAUTH, OpenPGP, smart cards, etc which the Yubico Security Key does not support but I don't believe Windows Hello implements these capabilities in security keys.

Can anyone confirm? It just means I have to buy a YubiKey 5 with FIDO2 support but its a real pain for Microsoft to simply dump support for FIDO U2F when a year or two ago, it was considered the mainstream security 2nd factor key implementation before OAUTH
and FIDO2 specifications were solid.