You are using macOS or Linux(GUI), and you have bought a FIDO2 security key, but where to set the PIN? Or where to enroll the fingerprint? I think some people would be confused. This article describes how to set a PIN and fingerprint for a FIDO2-compatible security key for macOS or Linux users.
There are 3 main patterns for setting FIDO2-compatible security keys.
(Hereafter, FIDO2-compatible security keys are abbreviated as security keys.)
Security key setup for Windows (10, 11) FIDO2 Security Key PIN Setting / Fingerprint Setting - for Windows
Setup using Chrome browser for macOS and Linux → Here is how to do it. Below are links to each section. How to access the security key setup screen How to register PIN How to enroll fingerprints → Please refer to these instructions to add another fingerprint too. How to remove fingerprints How to change the PIN How to reset the security key → If your security key has been blocked, please follow these steps to reset it. Buy a security key
Setup using tools provided by each authentication device vendor → Please check the website of each authentication device vendor.
Environment Information
PC
macOS Monterey (12.6)
Browser
Chrome (version 90 or later)
Security Key
YubiKey 5 NFC (non-biometric)
YubiKey Bio (biometric)
※ The above security keys were used for the explanation, but the same operation is possible with other security keys.
Notes
Leaving the setup screen for too long
The next operation may fail if the security key setup screen is left for too long.
When you are asked to operate with the security key, if you leave it too long, it may fail due to timeout.
Information about PIN change Even if you change the PIN of a security key that has already been registered on multiple websites, you can use it without any problems.
About security key reset If you enter the wrong PIN 8 times in a row, you will be asked to reset your security key. After resetting, all the credentials that have been registered on websites and apps so far will also be removed.
If the security key does not respond Please try the following operations:
If it is connected via a USB hub, etc., try to connect it to the PC directly.
If there is still no response after connecting to the PC directly, please try on another PC.
※ If there is still no response after trying the above ways, please contact the vendor where you bought the security key. Please use the inquiry form to inquire about keys purchased from us.
Setting security key
When you buy a security key, by default it has no PIN or fingerprint.
First, I will explain how to set a PIN.
※ Fingerprint-enabled devices also require a PIN.
[ How to access the security key setup screen ]
First, insert your security key into the USB port.
Open the Chrome browser, click the "︙" three-dot reader at the top right of the screen, and click "Settings".
Click "Privacy and security" on the left side of the screen.
※ Please note that it is not displayed in guest mode.
Click "Security".
Scroll to the bottom of the screen and click "Manage security keys".
※ This item is not displayed on Windows machines.
The security key management menu will be displayed.
[ How to register PIN ]
This section explains how to register a PIN. The explanation here assumes that the setting screen is displayed.
In case you have not opened the security key setup screen, refer to "How to access the security key setup screen" to access the setting screen.
Click "Create a PIN".
You will be asked to touch your security key, so touch your security key button (a metal part, a biometric sensor, a part where the light is blinking, etc.).
Enter a new PIN in the PIN field and enter a confirmation PIN in the Confirm PIN field.
※ PIN can be set from 4 to 63 characters (length range defined by FIDO2 specification).
※ Click the eye icon to see what you are currently entering.
Click the "Save" button after entering.
Click the "OK" button when you have finished creating your PIN.
The PIN setting is completed.
For other settings, please refer to the following.
Please refer to "How to enroll fingerprints" to enroll your fingerprint.
[ How to enroll fingerprints ]
You must set a PIN before enrolling your fingerprints. If the PIN setting has not been completed yet, set a PIN by referring to "How to register PIN".
This section describes how to enroll your fingerprints to your security key. The explanation here assumes that the setting screen is displayed. (Please follow the steps here to add another fingerprint too.)
In case you have not opened the security key setup screen, refer to "How to access the security key setup screen" to access the setting screen.
Click "Fingerprints".
You will be asked to touch your security key, so touch your security key button (a metal part, a biometric sensor, a part where the light is blinking, etc.).
Enter the PIN set for the security key in the PIN field.
After entering, click the "Continue" button.
Click the "Add" button.
The following screen will be displayed, so repeatedly put your finger on the fingerprint sensor and release it.
After enrolling your fingerprint, click the "Continue" button.
You will be asked to enter the name of your fingerprint, so enter it in the Name field.
After entering, click the "Continue" button.
The setting is completed when the enrolled fingerprint is displayed.
Click the "Done" button.
※ It is also possible to add another fingerprint from the "Add" button.
The fingerprint enrollment is completed.
For other settings, please refer to the following.
[ How to remove fingerprints ]
This section describes how to remove fingerprint data from the security key. The explanation here assumes that the setting screen is displayed.
In case you have not opened the security key setup screen, refer to "How to access the security key setup screen" to access the setting screen.
Click "Fingerprints".
You will be asked to touch your security key, so touch your security key button (a metal part, a biometric sensor, a part where the light is blinking, etc.).
Enter the PIN set for the security key in the PIN field.
After entering, click the "Continue" button.
A list of enrolled fingerprints will be displayed, so click the "×" icon on the right of the fingerprint you want to delete.
Click the "Done" button when the specified fingerprint is deleted.
Fingerprint removal is complete.
[ How to change the PIN ]
This section explains how to change the security key PIN. The explanation here assumes that the setting screen is displayed.
In case you have not opened the security key setup screen, refer to "How to access the security key setup screen" to access the setting screen.
Click "Create a PIN".
You will be asked to touch your security key, so touch your security key button (a metal part, a biometric sensor, a part where the light is blinking, etc.).
Enter the PIN currently set for the security key in the Current PIN field.
Then enter a new PIN in the PIN field and a confirmation PIN in the Confirm PIN field.
Finally, click the "Save" button.
After changing the PIN, click the "OK" button.
The PIN change is complete.
[ How to reset the security key ]
This section describes how to delete all security key settings and reset them to factory settings. The explanation here assumes that the setting screen is displayed.
In case you have not opened the security key setup screen, refer to "How to access the security key setup screen" to access the setting screen.
Note
About resetting a security key that is already in use If you reset a security key that has already been registered to a website or application, your authentication information will also be lost. If you want to use the reset security key, you will need to set your PIN and fingerprint and re-register to the website you are using.
Click "Reset your security key".
Remove your security key from the USB port, insert it again, and then touch its button (a metal part, a part where the light is blinking, etc.)
A reset confirmation message will be displayed, so touch your security key button (a metal part, a part where the light is blinking, etc.).
After resetting your security key, click the "OK" button.
After the reset is completed, the PIN and fingerprints that have been set up until now will be removed.
Security key reset is completed.
If you want to use the reset security key again, register your PIN or fingerprint, and register your authentication information to the website or application you are using.
[ Buy a security key ]
We sell multiple FIDO2-compatible security keys. You can also buy from Amazon as the following.
Buy on Amazon
※ Please contact us for bulk purchases.