V. Add a Certificates snap-in for My User account: in the console tree, expand the Personal store, and then click Certificates. These enhancements allow users to review FIDO2 discoverable credentials on their YubiKey and delete individual credentials without requiring a full. Protecting vulnerable organizations. The YubiKey 5 Series eliminates account takeovers by providing strong phishing defense using multi-protocol capabilities that can secure legacy and modern systems. This is great. The second method is for an Azure AD administrator to register a YubiKey on behalf of the user. But passkeys aren’t a new thing. Select User Accounts. ” (image courtesy of Apple. Two-step login using YubiKey is available for premium users, including members of paid organizations (families, teams, or enterprise). Yubikey 5 can store 25 FIDO2 resident keys, U2F doesn't store any keys on the device so you can have an unlimited number of those. There are limitations with the YubiKey in terms of supported accounts. This is what the link to the directory noted by the poster above indicates. With the latest update to Windows 10 (version 1809) and existing native support in Edge, all. 2. Read the YubiKey 5 FIPS Series product brief >. Using the Yubikey 5 series, learn exactly how to setup and use your 2FA key not just as a key, but also as an authenticator. The Security Key by Yubico is a simple, durable, and affordable way to add hardware two-factor authentication. Learn how you can set up your YubiKey and get started connecting to supported services and products. A small, physical device you plug into your computer or connect to your phone via NFC, Yubikey provides an additional layer of security to your online accounts and services by requiring a hardware key for login – a process called two-factor authentication (2FA) or multifactor authentication (MFA). Experience stronger security for online accounts by adding a layer of security beyond passwords. Yubico - YubiKey 5C NFC - Two-Factor authentication (2FA) Security Key, Connect via USB-C or NFC, FIDO Certified - Protect Your Online Accounts $55. " Now the moment of truth: the actual inserting of the key. 5 seconds) will output an OTP based on the configuration stored in slot 1, while a long. Select Next. The YubiKey Bio — first teased almost two years ago at Microsoft Ignite in November 2019 — jumps on the passwordless bandwagon by embedding a built-in fingerprint reader to the key. Resources. Edited. Each YubiKey must be registered individually. I'm not OP, and I only have TOTP on about 10 accounts, but I have about 175 accounts in my password manager. To find out if an application is compatible with the YubiKey Bio - FIDO Edition, browse to the Works With YubiKey Catalog, and in YubiKey drop-down, select YubiKey Bio Series to only display services that are compatible with it. There's literally nothing you can log into using only my Yubikey; it's the second factor I use on a ton of stuff (password manager, VPN, GitHub and Google and a bunch of other web sites / SSO providers, etc. On the page shown above, select the user accounts to be provisioned during the current run of the Yubico Login for Windows by selecting the checkbox next to the username, and then click Next. It is certainly possible to store several 3,052-byte certs on a 5. The theoretical limit is higher than the practical limit. "The YubiKey 5 NFC is the world's most effective security key that supports more online services and applications than any other security key. If you lose access to your primary authentication method (e. Create a Google Account. 2 or later. Unfortunately the specifics depend entirely on the service. Description. Wait for several moments until the indicator light on your YubiKey begins flashing. . *The YubiKey FIPS (4 Series) and YubiKey 5 FIPS Series devices, when deployed in a FIPS-approved mode, will have all USB interfaces enabled. Under "Security Keys," you’ll find the option called "Add Key. Features include: Secure – Hardware-backed strong two-factor authentication with secret stored on the YubiKey, not on the mobile device. Convenient and portable: The Security Key NFC fits easily on your keychain, making it convenient to carry and use. On the device you want to add, sign in with the same Apple ID you used to turn on two-factor authentication. YubiKey is a physical security key which enables strong multi-factor authentication into a variety of systems. However, on login I'm asked, as usual, to enter my 6-digit passcode rather than to use one of the Yubikeys. Each Security Key must be registered individually. I am pretty sure that it's over 30, but under 60, I'm not certain. e. Inconsistent use of two-factor authentication. The YubiKey generates a one-time password of 6 or 8 digits, which matches your account and belongs to that platform only. $55 USD. MacOS: Apply Permission. #1. 3 hours ago · Save up to 89% on Black Friday streaming deals from Hulu, Disney Plus, Max, Peacock, Paramount Plus, and more Written by Brendan Griffiths 2023-11-24T08:00:01ZApple AirPods Max. Here's how to get started setting up your #YubiKey with your Google account, Facebook, and Twitter. And with prices starting at $25, it's one of those indispensable gadgets for the 21st century. 2. Using hardware-based security keys makes it. But, if you use WebAuthN as a factor type, you should be able to enrol the same YubiKey to same users. Save a service’s QR code or secret key, so you can program the credential into other YubiKeys. FIDO2, authenticator apps, or email. Pricing of the 5 series varies. On iPhone or iPad. $50 at Yubico. If you still choose sms as your backup login method, people can bypass your Yubikey to login. I generate a 16 character random password for every account, and now that bitwarden can generate random usernames I use that as well. Summarized, it looks like this. Keep your online accounts safe from hackers with the YubiKey. 11 hours ago · Officials at the SoCal Challenge basketball tournament are investigating the situation after a fan allegedly called Cal forward Fardaws Aimaq a "terrorist,"…14 hours ago · CNN’s Chris Wallace sits down with businesswoman and former reality TV star Bethenny Frankel who says that reality TV participants should be able to unionize. We encourage you to add two authentication methods to your account. It took me an embarassingly long time to add 2FA to my password manager, Bitwarden. Its compatibility with USB-C devices ensures seamless connectivity, and it supports various authentication protocols and services. No batteries or moving parts: The YubiKey 5 NFC is a simple device with no batteries or moving parts, so it's very reliable. Tap Add Security Keys, then follow the onscreen instructions to add your keys. Convenient and portable: The YubiKey 5Ci fits easily on your keychain, making it convenient to carry and use wherever you go, ensuring. The Web Authentication API (also known as WebAuthn) is a specification written by the W3C and FIDO. Compatible with popular password managers. Yubico, a company that sells physical security keys for two-factor authentication, today announced the launch of the new YubiKey 5C NFC. Free delivery and returns on eligible orders. Click OK. YubiKey Smart Card Specifications. 509 digital certificate by default. When you set up TOTP 2FA, the service gives you a secret key, which is a randomly generated password, that you and the server know. FIDO2 supports not only today’s two-factor authentication but also paves the way for eliminating weak password authentication, with strong single factor hardware-based authentication. Stops account takeovers. Open the Details tab, and the Drop down to Hardware ids. Default is 12345678. The YubiKey C Bio is an excellent melding of Yubico's design philosophy and biometric authentication. You can use YubiKey 5 NFC security key to add an extra layer of protection for your Online accounts. When using OATH with a YubiKey on desktops or mobile devices, the shared secrets are stored and processed in the YubiKey’s secure element. Apple will let you enroll up to six keys to your account. However, unlike the PINs of other YubiKey apps, there is no maximum limit on the number of consecutive wrong attempts an adversary can make — if given unfettered access to your YubiKey, an adversary would be limited only by the YubiKey hardware’s ability to process password attempts, allowing around 100,000 password attempts per day. At launch no consumer services are ready to support password-less login. Should an exemption be obtained to deploy these devices with some interfaces disabled, the PID and iProduct values will be. For all YubiKeys, Yubico’s USB vendor ID (VID) is 0x1050. Make sure the service has support for security keys. This guide is intended for all Microsoft Office 365 or Azure users that would like to improve the security of their accounts by registering a YubiKey as a Security Key. Copy this key to a file for later use. I have come to understand there are some (fairly low) limits on how many accounts you can use certain types of authentication with per-key. . of collections--2. These credentials, which are protected by a PIN, enable passwordless login, where the YubiKey, unlocked by a PIN and authorized by touch, can log you in to your accounts without entering a username or. Let me know if this helps! Okta, Inc. 99 $549. The Information window appears. Activating it types out your password and “presses” enter at the end. On the page shown above, select the user accounts to be provisioned during the current run of the Yubico Login for Windows by selecting the checkbox next to the username, and. But you can do it your way. Under products and Services, select Microsoft 365 and Office Option. This certificate authenticates the device or user for whatever service they. YubiKey 5 CSPN Series. Professional Services. For example, one of the most basic forms of 2FA involves configuring your Google account so that after you enter. If the answer is yes, ho many accounts max can we enroll on one yubikey? If you configure the YubiKey with the YubiKey factor type in, Okta is not going to work. Next, to create a spare key for this account, you will need to scan the same QR code generated from the initial registration and then scan your spare. Register a YubiKey to a user account in Azure AD as an OATH-TOTP token. In essence, it’s just an electronic version of writing your password on a piece of paper and typing it out when you need it. Given physical access to an unencrypted laptop, an evil maid attack is extremely easy. Unlimited. FIDO only. websites and apps) you want to protect with your YubiKey. Default is 12345678. In the password prompt, enter the password for the user account listed in the User Name field and click Pair. Contact support. Yubico Authenticator adds a layer of security for online accounts. This Yubico support article mentions 3 ways to deploy YubiKey Smart Cards in an AD environment: Smart Card Login for User Self-Enrollment (also illustrated in this Youtube video ); Smart Card Login for Enroll on Behalf of; Smart Card Deployment: Manually Importing User Certificates. YubiKey Bio Lockout using Duo Windows Login; YubiKey Bio Lockout using PingID Integration for Windows Login; How to collect FIDO WebAuthn logs; Guides. I re-added the Yubikey. Trustworthy and easy-to-use, it's your key to a safer digital world. Either use style can help you avoid phishing attacks, and the YubiKey Bio can be used with a wide range of applications and services, including 1Password, Google Chrome, Microsoft accounts. Importance of having a spare; think of your YubiKey as you would any other key. Think of a time when you have created a new account and didn’t have to create a new password. $25 USD. All you will need to do is download the app on a desktop or mobile device, plug in or scan your key, and you are able to access to all the codes on it. Each YubiKey comes with a hole designed to keep it handy on your. That's even more of a reason to use separate accounts. Create a strong password & a more secure account. 3 or later, or a Mac on macOS Ventura 13. Many smartcards have at least one certificate slot that is occupied by an x. All it takes is one confused individual to screw up the account configuration and lock everyone else out. For each service you set up, have your spare YubiKey ready and add it right after the first one before moving to the next. This document describes the necessary steps to register a YubiKey (security key) to a Microsoft account. Maybe 150 for me, and 25 for family members. USB-A NFC. Here is how according to Yubico: Open the Local Group Policy Editor. 70 Yubico - YubiKey 5C NFC - Two Factor Authentication USB and NFC Security Key, Fits USB-C Ports and Works with Supported NFC Mobile Devices - Protect Your Online Accounts with More Than a Password Yubico - YubiKey 5 NFC - Two-Factor authentication (2FA) Security Key, Connect via USB-A or NFC, FIDO Certified - Protect Your Online Accounts Download and run YubiKey for Windows Hello from the Store. It's the world's most protective USB and NFC security key that works with more online services/apps than any other. Right click on the YubiKey Smart Card and select Properties. But Yubico says it wants to. You can upload this key to any server you wish to SSH into. Simply plug in via USB-C to. 5 / 5. Next to the menu item "Use two-factor authentication," click Edit. YubiKey 5 NFC. YubiKeys are available worldwide on our web store and through authorized resellers. FIPS Level 1 vs FIPS Level 2. Security key. (Customer) awesome. Yes, zero space. YubiKey 5 Series works with the most web services and includes our most feature-rich security keys that prevent account takeovers and offer one-tap login. The key reset effectively makes your your Yubikey new again, and I had to re-enroll my device with all my accounts. Check the Authenticator box. Rohos allows you to also restrict login for your account unless you have your yubikey. Downloads. via USB C on desktop or via NFC on the android application. Setting a Yubikey with Auth0 is a relatively straightforward process; all you need is the. The Security Key C NFC by Yubico simplifies your login and secures your account on hundreds of services like Gmail, Facebook, Skype, Outlook, and more. Product documentation. Cyber insurance. Step 7: 1,758. With the release of the YubiKey 5Ci device with firmware 5. I’ve used this device for over a year and want to share whether it’s worth using. 4. Yubico. Each function on the YubiKey can only accept. on the server in ad change settings on the user account to require a smart card to login. x YubiKey, it is possible to store a 3,052-byte cert in a slot. Use our phishing-resistant passwordless MFA solution to secure your on-premise and cloud resources. Learn. Credential Management allows the WebAuthn Client to display the credentials that reside on the YubiKey with firmware 5. In U2F, the device has no record of how many accounts it can access. Using a security key as a type of two-factor authentication is a proven and easy way to lock your accounts and keep them secure. 1. On a computer using Google Chrome, go to 2-Step Verification of your Google account. This multi-protocol security key works with your iPhone and desktop. You can also follow the steps written below for how the setup process usually looks when you want to directly add your YubiKey to a service. The standard for U2F is to either use key wrapping and store the encrypted key on the web service (e. 7. Inconsistent use of two-factor authentication. Multi-protocol security key, eliminate account takeovers with strong two-factor, multi-factor and passwordless authentication, and seamless touch-to-sign. 4. Keep reading this Yubico YubiKey 5 NFC review to learn more. FIDO2, authenticator apps, email,. The keys are stored on the key itself rather than on your devices or the cloud. Security Key Series by Yubico delivers FIDO2 and FIDO U2F in a single device, supporting thousands of existing U2F two-factor authentication (2FA) services as well as future FIDO2 implementations. Note: If this prompt doesn't appear, see the Troubleshooting and Additional Topics section below. PIV: FIPS 140-2 with YubiKey 5 FIPS Series. It's easy to use, secure, versatile, durable, and affordable. a. The Yubikey brand has been around for a while, but the reason they're starting to become "hip" as of late is because of two specifications making such devices suddenly very conveinient to use on the web: U2F (2014, supported by the Yubikey 4 and up) and WebAuthn (2017, fully-supported by the Yubikey 5 but backwards-compatible with U2F. For the master key, I went with RSA and setting my own capabilities as I need more beyond signing. Facebook iirc insists on a PIN on your Yubikey. That's even more of a reason to use separate accounts. Hidden shortcomings is that Yubikey 5 has lot of features and a learning curve. At this point, if you wish to store the same account on a second YubiKey, simply repeat steps 3 and 5-9 for each additional YubiKey. Step 3: Locate the authenticator code from your Yubico Authenticator. If the answer is yes, ho many accounts max can we enroll on one yubikey? If you configure the YubiKey with the YubiKey factor type in, Okta is not going to work. The double-headed 5Ci costs $70 and the 5 NFC just $45. I have not yet tried to pair YubiKeys 3 and 4 with an account so perhaps i will get #3 and 4 and give it a go. As holiday revenues grow, so does the temptation for criminals to take a part of the action for themselves – over […]The FIDO2 application allows for secure single and multi-factor authentication, and can store up to 25 resident credentials. The YubiKey 5C offers secure and convenient two-factor authentication, providing strong protection for your online accounts. Dec 31, 2022. Text and files *Two-step login. The PKCS#11 interface should now see a key named AUT or SIG depending on the slot used (3 or 1). The dedicated Protonmail community deserves a real response from the crack team of Protonmail scientists and engineers. Type "Secure Office 365 account" and click Get Help. I tested the hardware by attempting to protect my Google account, and it was a simple set-up process on my Mac. 25 FIDO2 Resident Credentials (pretty specific use case for this) 1 of the following (YubiOTP, HOTP, Challenge/Response, Static Password) another 1 of the following (YubiOTP, HOTP, Challenge/Response, Static Password) There are only 3 key slots, but. Instead of having multiple keys for one account, all you need is KeepassXC as TOTP and password management. You can purc. All it takes is one confused individual to screw up the account configuration and lock everyone else out. Visit the Yubico Store. ago. A PIV-enabled YubiKey NEO holds 4 distinct slots for certificates and a YubiKey 4 & 5 holds 24, as specified in the PIV standards document. 59 x 0. Additional information. 3 and above so that the user can act upon them. To recap; use both Yubikey for work and home, carry one on your keys or a lanyard, keep one safe at home as a “backup” (you’d use it to recreate the tokens if you lose / damage the “main” key). So if you use key-based auth, you can't. Insert the YubiKey into your computer, open the terminal, and enter the following commands to link your YubiKey with your account: mkdir -p ~/. Yubico can help you drive high productivity while protecting your employees from phishing attacks and account takeovers. com is the source for top-rated secure element two factor authentication security keys and HSMs. While the YubiKey Bio with USB-A costs $80 (around £58), the YubiKey Bio with USB-C costs $85 (around £62). 70 £ 67 . The YubiKey 5 series, image via Yubico. For each service you set up, have your spare YubiKey ready and add it right after the first one before moving to the next. More specifically, each YubiKey contains a 128-bit AES key unique to that device, which is also stored on a validation server. Select Security > Two-step login > YubiKey OTP Security Key > Manage. My web site host alone has 3 different logins. Keep your online accounts safe from hackers with the YubiKey. The YubiKey NEO is our mobile-friendly device that is equipped with near field communication (NFC). 3. The YubiKey 5C provides strong and reliable two-factor authentication, offering secure protection for online accounts. Use PUK to unblock PIN. To use the YubiKey as a Smart Card on iOS feature as shown in the demo, you must have the following (all prerequisites are discussed in the Yubico guide here ): Apple iPhone or iPad (Lightning connector only) with iOS/iPadOS 14. Your video is indeed talking about U2F. A basic key. (100 KB)After you turn on two-factor authentication on your iPhone, you can add other trusted devices to your Apple ID account. Each YubiKey 5C NFC key comes with a static password too, so when you open an application or account, say Twitter, for instance, you’ll be prompted to enter your 2FA key after logging in. Control what others see about you across Google services. g. This document describes how to use both tools. They’re better because they aren’t created insecurely by humans, and because they use public key cryptography to create much more secure experiences. In most cases for personal use, a local account is best. It’s compatible with USB-A and NFC connections and costs only $45. Place. The YubiKey is a hardware authentication device manufactured by Yubico to protect access to computers, networks, and online services that supports one-time passwords (OTP),. Something user knows. Flexible – Support for time-based and counter-based. Once 2FA is activated by the administrator within UserLock, enrollment for using the YubiKey is. Threat actors often target over-privileged accounts to gain unauthorized access, exfiltrate sensitive data, introduce malicious activity, or engage in other forms of. Given physical access to an unencrypted laptop, an evil maid attack is. The least expensive model, the YubiKey 5 NFC, costs $45; the priciest, the 5C Nano, costs $60. 5 out of 5 stars 1,400 ratings. FIDO2 can store credential data on. Learn how using YubiKey products with Microsoft accounts can provide the highest level of two-factor authentication and. gpg --generate-full-key. On the next screen, click on Add Security Keys or press Return Key. It took me an embarassingly long time to add 2FA to my password manager, Bitwarden. $90 USD. No. ). . The Nano model is small enough to stay in the USB port of your computer. Plug in a YubiKey 5Ci. Generate 2-step verification codes on a mobile or desktop device and apply cross platform. ago. To use it, the user inserts the YubiKey into a USB port on their computer when they're signing in and taps the YubiKey's button when prompted. I am not overly fond of using the Yubikey for TOTP, but it's a viable option. Select Choose another option, and then Select Security Key. After inserting the YubiKey into a USB Port select Continue. We hope that you will not lose your YubiKey, but for larger deployments and serious use, establishing processes around lost YubiKeys is an important and challenging aspect. Step 3. I've registered two Yubikeys on my iPhone 11 Pro Max with iOS 16. Note: Some software such as GPG can lock the CCID USB interface, preventing another software from accessing applications that use that mode. * The Security Key C NFC is designed to protect your online accounts from phishing and account takeovers. Related YubiKey Security token Peripheral Computer hardware Computer Information & communications technology Technology forward back r/ProtonMail Official subreddit for Proton Mail, Proton Mail Bridge, and Proton Calendar. YubiKey (MFA). Maximum Limit Account per YubiKey. Yubico sells models with USB. Convenient and portable: The YubiKey 5 C NFC fits easily on your keychain, making it convenient to carry and use wherever you go, ensuring secure access to your accounts at all times. Theorically the slot 2 could also be used but this isn't supported by OpenSC yet. Or simply "turn on" Apple's version but "what" it is for is probably much higher. You’ll then be taken through the steps needed to. Google defends against account takeovers and reduces IT costs. Under category, select "Manage account security". Yet my Epic Games account had 2FA on – and I’m not even that much of a gamer. Connect your YubiKey by touching the button or the golden edge. YubiKeys from the 5 Series support 6 different protocols for two-factor authentication, each with its own limit on the number of accounts it can be associated with. We will need them to set up the individual accounts we each have. It would be great to be able to generate and import 4096 bit RSA keys with this tool, now that the Yubikey 4 supports 4096 bit RSA keys. But, if you use WebAuthN as a factor type, you should be able to enrol the same YubiKey to same users. Yubico is a company that sells the "YubiKey," a small piece of hardware that protects access to computers and online accounts by providing strong two-factor authentication in lieu of receiving a. 3 or later, an iPad on iPadOS 16. Authenticate using a YubiKey as. The app allows you to add and remove accounts from your YubiKey, and it also lets you manage your TOTP codes. Reply. At the prompt, plug in or tap your Security Key to the iPhone. config/Yubicopamu2fcfg > ~/. I suspect anyone with a US deposit account is covered, so long as their bank is Member FDIC (most are). Yubico SCP03 Developer Guidance. 11oz) As noted above, the YubiKey 5Ci is unique because it includes two connectors: one for Apple Lightning and another for USB-C. The Yubikey has several. Note that some services call two-factor authentication two-step verification. This works by just tapping the YubiKey NEO to the back of your phone. Different authentication protocols have different risk models. Dimensions: 0. Two-step Login via YubiKey. Step 1: In the Windows Start menu, select Yubico > Login Configuration. ago • Edited 1 yr. com is the source for top-rated secure element two factor authentication security keys and HSMs. losing your phone), you’ll have a second option to use to get access to your account. 3 and above so that the user can act upon them. The Yubico Security Key NFC is the most affordable security key you can get today, and one of the most well made keys available. Desktop: Insert your YubiKey into your mobile device. YubiKey. NYC & Newfoundland. Under category, select "Manage account security". json , point the root and crt options to the generated certificates, replace the key option with the YubiKey URI generated in the previous part, and configure the kms option with the appropriate type and pin . Portable – Get the same set of codes across our other Yubico Authenticator apps for desktops as well as for all leading mobile platforms. upn: Each user’s User Principal Name from Azure AD serial number: A unique identifier, recommend using the serial number of the YubiKey secret key: A randomly generated OTP secret. Yubico OTPs can be used for user authentication in single-factor and two-factor authentication scenarios. The YubiKey is compatible with the NIST PIV Specifications (SP 800-73-4). Secure it Forward: One YubiKey donated for every 20 sold. Email and social media and VPNs, another 12 or so. Remove your YubiKey and plug it into the USB port. Limited to 128 characters. Facebook iirc insists on a PIN on your Yubikey. Step 2: Apply the permissions, quit Yubico Authenticator application and restart it. Yubico and Microsoft Introduce Passwordless Login. A whole host of online companies support two-factor authentication with YubiKey, including Google, Apple, Dropbox and many more. Some accounts offer more, and there are ways to get more on your own. $55. 1 - Something you have (The YubiKey) 2- Something you know (The PIN for the FIDO2 credential on the YubiKey) -. You either need to use a local account, active directory or Azure Active Directory. Use the Yubico Authenticator for Desktop on your Microsoft Windows, Mac (OS X and macOS), or Linux computers to generate OATH credentials on your YubiKeys. The YubiKey 5 NFC uses a USB 2. Learn how using YubiKey products with Microsoft accounts can provide the highest level of two-factor authentication and protection on all major devices. . Use PUK to unblock PIN. The practical limit I've been told by some Google tech-savvy product folks is around 10 keys. 35mm. Yubico Authenticator App for Desktop and Mobile | Yubico. The new Security Key by Yubico supports both the Web. Generate 2-step verification codes on a mobile or desktop device and apply cross platform. Ten years ago, at the 2008 RSA Conference, Yubico launched the first YubiKey with the goal of making secure login easy and accessible for everyone. LastPass users see special note below. . The YubiKey 5 Series supports most modern and legacy authentication standards. The current YubiKey 5 series includes options for USB. While compatibility limitations and initial setup complexity may exist, the YubiKey 5C remains a. If you have entered the PUK wrong several times you’ll need to reset the whole yubikey. Get your own Yubikey using my af. x YubiKey, but once the total size limit is reached, the YubiKey won't be able to store any more, even if. 00 Save 18%. Text only. Verify your account. But there is nothing which clearly indicates this within Google settings and the workflows look basically the same. It does give me the option to login with a security key BUT it's optional. YubiKeys are tamper-proof, waterproof and kink-proof. It can take up to 5 seconds for the two devices to complete the operation. The 5Ci is the successor to the 5C. ridobe • 1 yr. Step 1: Go to your Microsoft account profile configuration page : Step 2: In the list of sign-in methods, identify the YubiKey you would like to remove from your account and then click on the “ delete ” link (in the case you have multiple YubiKeys associated to your account) Step 3: In the pop-up message,. Set up a recovery phone number or email address.