YubiKey security key for multifactor authentication - Windows

mfa yubikey multi-factor-authentication security-key

Note: A Microsoft passkey is the designated MFA method for university faculty, staff, and student employees.

The YubiKey security key is an alternative MFA method for those who are unable to use passkey for multi-factor authentication, such as those without the required phone OS or Bluetooth. After registration, your YubiKey can be used with multiple devices to log into university services. It is recommended that you purchase a second YubiKey as a backup in case your YubiKey is lost or damaged.

See About YubiKey and YubiKey FAQ for more information.

Supported YubiKey models

The university standard for security keys is the YubiKey provided by Yubico. The following YubiKey models are supported by IT Services:


The C NFC model will be available to users for access to general university portals and systems, email, VPN, payroll and financial systems, research databases, and other data.	The 5C NFC model is available to server administrators who are unable to use Duo.

Step 1: Set up Windows Hello

Note: Setting up Windows Hello is only for Windows devices. Mac users should use the YubiKey registration for Mac article to register their YubiKey.

Instructions for setting up Windows Hello

Step 2: Request a YubiKey

Use the YubiKey Request form to request a YubiKey.

Step 3: Register your YubiKey

Mac users should use the YubiKey registration for Mac article to register their YubiKey.

NOTE: If the registration process times out, restart the registration process at “click +Add sign-in method”. Some steps may be skipped if you had already completed them before the time-out.

Insert the YubiKey into your computer.
Go to account.uark.edu.
You will be prompted to authenticate using the Authenticator app or a different method that has been set up on your account to register the YubiKey as a new MFA method.
In the Security Info pane, click Update Info.
On the Security Info page, click +Add sign-in method.
Add a sign-in method by selecting the Security key or passkey option from the list.
From the next dialog box, click “Set up passkey using another device”. Do NOT click Next.
Select Security Key when asked to choose where to save your passkey.
When prompted by the Insert your security key into the USB port screen, plug the YubiKey into the device. If the YubiKey is already plugged in when prompted, remove and reinsert.
Create a PIN for the YubiKey. Type the PIN in the New Security Key PIN field and again in the Confirm Security Key PIN field.
A YubiKey PIN can be 4-63 characters and may include letters, numbers, and special characters.
You will be prompted to touch your security key. Tap the circle on your YubiKey. You will prompted to touch the security key again.
You will be prompted to name your security key and click Next.
You may name your key anything you like. The name is to differentiate this key from any other security keys that you might have registered.
A window showing that the passkey was create will be displayed. Click Done.

Your YubiKey is now registered and ready to be used as your MFA method.

Step 4: Sign out of everything

You must sign out of everything to prevent issues when enrolling in the MFA with Passkey security group.

Step 5: Enroll in MFA with Passkey in Microsoft Authenticator group

After setting up the YubiKey, you will need to self-enroll in the Required Passkey group.

Instructions for enrolling in the MFA with Passkey in Microsoft Authenticator group

Using the YubiKey

Sign-in prompt windows might be different or in a different order than shown here. The prompts that you are given could vary depending on service being logged into.

Note: If you have set up a passkey, you might be prompted to authenticate with the passkey PIN.

Note: You might be prompted to authenticate with your Windows Hello PIN.

When multifactor authentication is required for a login, the YubiKey must be plugged into the computer or other device.

Select Sign-in options.
Select Face, fingerprint, PIN, or security key.
You will be prompted to Choose a passkey. Select Security Key.
You will be prompted enter your security key PIN. Enter the PIN that you created during YubiKey registration in the Security Key PIN field, and click OK.
When prompted to Touch your security key, tap the YubiKey that is plugged into your device.