Set up a security key for MFA
A security key, also known as a hardware token, is a device you can plug into your computer or use with devices with NFC (near-field communication) capability to access your account. Most modern smartphones and tablets have NFC capability.
At the University of Bristol, we support YubiKey security keys.
On this page:
Before you start
- Windows and Linux users should request a Yubico Security Key C NFC.
- Apple Mac users (or people who use an Apple Mac as well as another operating system) should request a Yubico YubiKey 5C NFC. This will also work with Windows and Linux.
- You must set up another MFA method before you can add a security key to your University account.
Set up a security key on Windows or Linux
Important notes
- If your experience differs from that described in this guidance, please read the next step of the instructions. Some people have slightly different experiences due to their device set up. If you get stuck, please contact IT Services by phoning 0117 428 2100, using the IT self-service site, or visiting the IT Services Counter in the Arts and Social Sciences Library.
- You can also follow Microsoft instructions to add a security key as an MFA method.
Set up
To set up your YubiKey security key, you will need a computer or laptop with a USB-C port.
- In a web browser (please use Microsoft Edge or Google Chrome), navigate to https://mysignins.microsoft.com/security-info.
- Log in using your University username and password if you are prompted to. Reminder: You must set up another MFA method before you can add a security key.
- Click 'Add sign in method' and choose 'Security key'. Your screen may prompt you to sign in using another authentication method before you can continue setting up the security key.
- Click 'choose USB device'.
- Plug your security key into a USB-C port on your computer and click 'next'.
- Depending on your device set up, you may see different options:
- You may see a QR code. To register a security key, do not scan the code, but insert your security key, click 'back' and then select 'Use an external security key'. (This screen may also say 'use a Windows Hello or external security key'.) Note: You may need to click 'back' before you can select 'Use an external security key'. Do not click 'cancel' or you will have to start the process again.
- If you are asked to 'Create a passkey', click on 'use different device'.
- You may be asked to name your security key.
7. Click 'ok' to the next two prompts.
8. You will be prompted to create a PIN for the security key. Make sure you remember this PIN or use a password manager to keep it safe.
9. To complete setup, you will be asked to touch the sensor on your YubiKey security key.
10. On your computer screen you should now see a box that confirms your security key is set up: 'you’re all set!'
We recommend you test your security key by opening a new browser window and logging in to Microsoft Office. You need to have your YubiKey security key connected to a USB port on your computer. When prompted, please enter your PIN and tap the sensor on the security key. Alternatively, if your computer or device has an NFC reader, you can tap the security key against it.
Set up a security key on Apple Mac
Yubico YubiKey 5C NFC security keys can be used on Apple Mac computers, as well as Windows and other operating systems. If you do not use an Apple Mac, please request a Yubico Security Key C NFC from IT Services.
Important notes
- If you use an Apple Mac, we recommend you set the security key up as both a security key (also known as FIDO2) and as an authenticator app (also known as time-based one-time password). We recommend both because it is easier to authenticate using a security key where the option is available, typically in web applications. But you need to use an authenticator app for authenticating in Microsoft native apps (apps downloaded to your Mac), such as Word, Outlook and Teams.
- If your experience differs from that described in this guidance, please read the next step of the instructions. Some people have slightly different experiences due to their device setup.
- If you get stuck, please contact IT Services by phoning 0117 428 2100, using the IT self-service site, or visiting the IT Services Counter in the Arts and Social Sciences Library.
- To set up, you will need a computer or laptop with a USB-C port.
Set up the YubiKey as a security key (for use with web applications)
Follow the set up for Windows devices. Your experience may differ slightly, please read the instructions carefully and contact IT Services if you are struggling to set it up.
Set up the YubiKey as an authenticator app (for use with Microsoft apps downloaded to your Mac computer)
- Download the Yubico Authenticator app on your Mac.
- If your Mac is a University-managed device, download the Yubico Authenticator app from the software Self Service app
- If you do not have access to the Self Service app, download the Yubico Authenticator app from the App Store
- The Yubico Authenticator app .
- Using your web browser (please use Microsoft Edge or Chrome, not Safari or Firefox), visit https://mysignins.microsoft.com/security-info
- Log in using your University username and password if you are prompted to.
- Click 'Add sign-in method' and choose 'Authenticator app', then 'Add'.
- Select 'I want to use a different authenticator app' and 'Add' and 'Next'.
- Select 'I want to use a different authenticator app' and 'Next', then 'Can’t scan image?'
- Open the Yubico Authenticator app and choose 'Add Account'. You may need to insert your YubiKey and select the 'Configure YubiKey' by clicking on the icon in the top right.
- Complete the form using the information below:
- Issuer: UoB MFA
- Account Name: <paste in the whole line from the screen with the QR code> (for example, 'University of Bristol:ab12345@bristol.ac.uk'). Don’t worry if the field truncates the account name.
- Secret Key: <paste in from same screen>
- Require Touch: <tick this box>
- Then click 'Add account' or 'Save' on the Yubico Authenticator app.
- Click 'Next' on the browser set up page.
- To obtain the code, double click the 'University of Bristol MFA' account in the YubiKey app and then touch the metal part of the key. A 6 digit (OTP) code will appear. Type this into the browser.
- When this has been accepted you have now set up the key correctly.
Help and support
If you need support setting up your security key, please contact IT Services by phoning 0117 428 2100 (available 24 hours), or raising a ticket using the IT self-service site (requires log-in). More technical queries, such as a reset to MFA if you have lost your phone or authentication device, can be resolved from 8 am until 5 pm, Monday to Friday (apart from on University closure days). Outside of these hours, please raise a ticket using the IT self-service site.
