Security Key

Tags Okta MFA

Overview

A security key is a FIDO2-capable hardware token that provides secure authentication. These security keys are generally small and plug in to a USB port on your device. Once configured, it allows you to verify your login by tapping the key and verifying with a PIN or biometrics. You can use the security key for MFA across various devices by inserting it in to the device on which you are logging in. 

Technology Services recommends using a security key as an alternative or backup to Okta Verify. 

How to get a security key

Any hardware token or physical security key that supports FIDO2 (e.g. Yubico Security Key) should be compatible for use with Okta as a security method.

If you already have your own security key, follow the instructions below to set it up for your Puget Sound account. If you do not have one yet, purchase a compatible token from any commercial source.

During the transition away from telephony-based security methods, Technology Services will have a limited number of Token2 dual USB-A/USB-C keys available for faculty and staff upon special request. Please submit a service request if you would like to request one.  

Once you have a security key, follow the instructions below to set it up for your Puget Sound account.

How to set up a security key

The exact steps to set up a security key will vary depending on what hardware, operating system, and browser you are using. If you encounter difficulties with the setup, please consult the security key manufacturer’s documentation or visit the Tech Center in the lower level of the Collins Memorial Library for assistance. 

General instructions

  1. Log in to your Puget Sound account at login.pugetsound.edu.
  2. Click your name in the upper-right corner then click Settings. 
  3. In the Security Methods section, click Set up or Set up another next to the Security Key or Biometric Authenticator security method.
  4. If prompted, re-authenticate to proceed. 
  5. Click Set up or Set up another under the Security Key or Biometric Authenticator option. 
  6. Click Set up on the next screen.
  7. Follow the on-screen prompts from your browser or device to complete the setup.

Step-by-step instructions

Set up a security key in Edge on Windows (click to expand section)

Set up a security key on Windows

The instructions below are only an example. The exact steps will vary depending on your security key, operating system, and browser. The following example is using a Token2 security key on Windows 10 in the Microsoft Edge browser. 

If you are prompted to set up MFA when logging in, skip to step #5. 

  1. Log in to your Puget Sound account at login.pugetsound.edu.
  2. Click your name in the upper-right corner then click Settings. 
    okta account settings menu
  3. In the Security Methods section, click Set up or Set up another next to the Security Key or Biometric Authenticator security method.
    secuirty methods set up security key or biometric authenticator
  4. If prompted, re-authenticate to proceed. 
  5. Click Set up or Set up another under the Security Key or Biometric Authenticator option. 
    set up security key or biometric authenticator
  6. Click Set up on the next screen.
    set up security key or biometric authentication
  7. A Windows Security dialog box will appear. Click OK to proceed.
    set up your security key to sign in to login.pugetsound.edu
  8. Click OK again to continue the setup. 
    continue setup and allow login.pugetsound.edu to see the make and model of your security key
  9. Insert the security key into the USB port on your device.
    insert your security key into the USB port
  10. If prompted, create a PIN for your security key or enter the PIN then click OK. 
    • Note: For Token2 security keys, PIN complexity is enforced. Please create a PIN that is at least 6 digits and does not contain repeating (e.g. 111111) or sequential numbers (e.g. 123456).
      continue setup by creating a PIN for this security key
    • If a PIN is already created for your security key, you should see a prompt to enter the PIN.
      enter your security key PIN
  11. Tap the metal part on the security key. 
    touch your security key
  12. You have finished setting up your security key! 

Set up a security key in Safari on Mac (click to expand section)

The instructions below are only an example. The exact steps will vary depending on your security key, operating system, and browser. The following example is using a new Token2 security key on MacOS Sequoia in the Safari browser. 

If you are prompted to set up MFA when logging in, skip to step #5. 

  1. Log in to your Puget Sound account at login.pugetsound.edu.
  2. Click your name in the upper-right corner then click Settings. 
    okta account settings menu
  3. In the Security Methods section, click Set up or Set up another next to the Security Key or Biometric Authenticator security method.
    secuirty methods set up security key or biometric authenticator
  4. If prompted, re-authenticate to proceed. 
  5. Click Set up or Set up another under the Security Key or Biometric Authenticator option. 
    set up security key or biometric authenticator
  6. Click Set up on the next screen.
    set up security key or biometric authentication
  7. A dialog box will appear. Click Other Options.
    other options for passkey
  8. Select Security key then click Continue. 
    use an external security key
  9. Insert the security key into the USB port on your device and tap the metal part on the security key.
    to set up a security key, insert and activate it
  10. You have finished setting up your security key! 

How to use a security key to log in

The exact steps to log in using a security key will vary depending on what hardware, operating system, and browser you are using. 

General instructions

  1. In a browser, go to login.pugetsound.edu.
  2. Type in your Puget Sound username and password then click Sign in.
  3. Select Security Key or Biometric Authenticator.
    • Note: If Security Key or Biometric Authenticator is not presented as an option, select Verify with something else. 
  4. Follow the on-screen prompts from your browser or device to verify the login.

Step-by-step instructions

Use a security key in Edge on Windows (click to expand section)

Use a security key on Windows

The instructions below are only an example. The exact steps will vary depending on your security key, operating system, and browser. The following example is using a Token2 security key on Windows 10 in the Microsoft Edge browser. 

  1. In a browser, go to login.pugetsound.edu.
  2. Type in your Puget Sound username and password then click Sign in.
  3. Select Security Key or Biometric Authenticator.
    • Note: If Security Key or Biometric Authenticator is not presented as an option, select Verify with something else. 
      select security key or biometric as security method
  4. Select Windows Hello or external security key when prompted.
    use a saved passkey for login.pugetsound.edu and select external security key
  5. Insert the security key into the USB port on your device.
    insert your security key into the USB port
  6. If prompted, enter the PIN for your security key then click OK. 
    please enter your security key PIN
  7. Tap the metal part on the security key. 
    touch your security key

Use a security key in Safari on MacOS (click to expand section)

Use a security key on MacOS

The instructions below are only an example. The exact steps will vary depending on your security key, operating system, and browser. The following example is using a Token2 security key on MacOS Sequoia in the Safari browser. 

  1. In a browser, go to login.pugetsound.edu.
  2. Type in your Puget Sound username and password then click Sign in.
  3. Select Security Key or Biometric Authenticator.
    • Note: If Security Key or Biometric Authenticator is not presented as an option, select Verify with something else. 
      select security key or biometric as security method
  4. Click Verify to continue.
    verify wth security key or biometric authenticator
  5. A dialog window will appear. Select Security key then click Continue.
    choose how you'd like to sign in and select security key
  6. Insert the security key into the USB port on your device and tap the metal part on the security key.
    insert and activate your security key
  7. If prompted, enter the PIN for your security key then click Continue. 
    enter the PIN to unlock your security key
  8. Tap the metal part on the security key. (You do not need to re-insert the security key.)
    to finish, insert and activate your security key again
     

 

Print Article

Related Articles (3)

Logging in with Multi-Factor Authentication (MFA)
Description of the login process with MFA
Managing Multi-Factor Authentication (MFA)
How to set up and remove MFA security methods
Okta Verify for Mobile Devices
How to set up and use Okta Verify on mobile devices for multi-factor authentication (MFA)