How do I set up a YubiKey as a passkey for my Purdue Microsoft (O365) account?

Overview

A YubiKey can be used as a secure authentication method for Purdue Microsoft (O365) Work or School accounts. YubiKeys support strong, phishing‑resistant authentication and can be used with NFC‑enabled mobile devices or USB‑supported computers. Purdue IT does not provide, issue, or supply YubiKeys. Users or departments are responsible for purchasing compatible YubiKeys. Purdue IT can assist with registering or removing YubiKeys from Microsoft Entra accounts but does not manage, replace, or distribute physical security keys.

YubiKeys are typically used when:

  • A smartphone is not available
  • Internet or push notifications are unreliable
  • A hardware‑based authentication method is preferred

Important: YubiKeys must support FIDO2 or OATH‑TOTP to work with Microsoft Entra ID.

Note: If you are reading this after May 29th, 2026 and are having issues connecting to the VPN with your Yubikey, please refer to this article - Article - How To Set Up Authenticatio...

Requirements

Before you begin, ensure you have:

  • A Purdue Career Account
  • A supported YubiKey (FIDO2 and/or OATH‑TOTP capable)
  • An NFC‑enabled phone or a USB‑A / USB‑C port on your computer
  • Access to the Microsoft Security Info page 

Common supported models:

  • YubiKey 5 NFC
  • YubiKey 5C NFC

Supported Authentication Types

YubiKeys can be registered with Purdue Microsoft accounts using:

  • Security Key (FIDO2) – Recommended
  • OATH‑TOTP (One‑Time Passcode) – Supported but less secure than FIDO2

Purdue IT recommends FIDO2 whenever possible.

Step 1: Sign in to Microsoft Security Info

  1. Go to:
    https://mysignins.microsoft.com/security-info
  2. Sign in using your:
    • Purdue email address (username@purdue.edu)
    • Career Account password
  3. Complete any existing MFA prompt.

Step 2: Add a Security Key

  1. Select Add sign‑in method
  2. Choose Security key
  3. Select:
    • USB device (for computers) or
    • NFC device (for phones)
  4. Select Next

Step 3: Register the YubiKey

For NFC (Mobile Device)

  1. When prompted, tap your YubiKey to the NFC reader on your phone
  2. You'll be prompted to scan a QR code for a passkey. Press the change button at the bottom right and then press Security Key.
  3. Create a PIN if prompted
    • This PIN is stored on the YubiKey, not your Purdue account

For USB (Computer)

  1. Insert the YubiKey into the USB port
  2. You'll be prompted to scan a QR code for a passkey. Press the change button at the bottom right and then press Security Key.
  3. Set or confirm the YubiKey PIN

Step 4: Name the Key

  • Enter a friendly name (example: YubiKey – NFC)
  • Select Next

Your YubiKey is now registered as a sign‑in method.

Using Your YubiKey

When signing in to Purdue Microsoft services:

  • Insert or tap your YubiKey
  • Touch the key when prompted
  • Enter the YubiKey PIN (if required)

YubiKeys can be used for:

  • Purdue email
  • Microsoft 365
  • Purdue SSO‑protected applications
  • VPN (if configured)

Setting a YubiKey as a Backup Method

It is strongly recommended to:

  • Keep Microsoft Authenticator or another MFA option as a backup
  • Register at least two authentication methods to avoid lockout

Troubleshooting

YubiKey not detected

  • Confirm NFC is enabled on your phone
  • Ensure your YubiKey supports NFC
  • Try a different phone orientation

Invalid PIN / locked key

  • Multiple incorrect PIN attempts may lock the key
  • Purdue IT cannot remove or reset a YubiKey PIN
  • PINs are stored locally on the YubiKey and managed by the user
  • Purdue IT can remove the YubiKey from the user’s Microsoft Entra account
  • Removing the key from Entra disables it as a passkey for sign‑in
  • PINs can be managed in YubiCo Authenticator
  • Please see YubiCo's article for additional information regarding PINs: Understanding YubiKey PINs

Lost YubiKey

Unable to Connect to Purdue VPN After May 29th, 2026 with Yubikey

Passkeys are not compatible with the Purdue VPN.

Set up your Yubikey to generate passcodes for authentication by following the instructions in this article: Article - How To Set Up Authenticatio...

 

Support & Assistance

To request help or report issues:

  • Submit a ticket via Purdue IT Support
  • Include:
    • Device type (NFC or USB)
    • YubiKey model
    • Error messages (if any)
Print Article