Managing FIDO2 Keys using Windows Control Panel

This guide will walk you through the process of using Windows 10/11 built-in tool to set up and manage your FIDO2 keys, including creating and managing PINs and registering fingerprints.

To get started, go to "Settings" → "Accounts" → "Sign-in options" → "Security Key" and click "Manage".

Managing FIDO2 Keys using Windows Control Panel



Next, insert your key and follow the on-screen prompts to touch it in a timely manner. 

Managing FIDO2 Keys using Windows Control Panel



If you haven't already, you'll need to set up a PIN before registering a fingerprint. To do so, click "Add" and enter a 4-63 character PIN.

Managing FIDO2 Keys using Windows Control Panel


You can change your PIN later by clicking "Change" on the same window. Important: you have to know the existing PIN to be able to set a new PIN without losing the data on the device.

Fingerprints

If your FIDO2 key features a fingerprint reader, an additional option for setting up fingerprints will appear on the "Manage" window.

Managing FIDO2 Keys using Windows Control Panel

If the fingerprint setup button is disabled, this means you have not set the PIN. PIN is a requirement for enrolling fingerprints.


To register a fingerprint, click "Set up" and enter your PIN. Follow the prompts to touch your key multiple times with one finger, until "All set.." message is displayed.

Managing FIDO2 Keys using Windows Control Panel 



You can add more than one finger if needed (our T2F2-Bio2 and T2F2-Bio devices support up to 25 different fingerprints stored).

To remove fingerprints, click "Remove" and enter your PIN.

Managing FIDO2 Keys using Windows Control Panel

Please note that this will remove all fingerprints at once (you can use alternative methods, such as Chrome based tool or Token2 Companion App, if you need to remove one particular fingerprint)


Reset

If you need to reset the device's FIDO configuration, click "Reset". This will erase all PINs and fingerprints on the device, but can only be done within the first 10 seconds after inserting the key.

Managing FIDO2 Keys using Windows Control Panel

Passkey/Resident Key Management

As of the time of writing (February 2024), the Windows control panel does not provide a dedicated interface for managing stored passkeys (also known as resident keys). You can efficiently manage them using one of the following methods:

Choose the option that best suits your preferences to address your passkey/resident key management needs.