Loading
Feature Disruption - Service Cloud VoiceRead More
Feature degradation | Gmail Email delivery failureRead More
Get Started with Salesforce
Table of Contents
Select Filters

          No results
          No results
          Here are some search tips

          Check the spelling of your keywords.
          Use more general search terms.
          Select fewer filters to broaden your search.

          Search all of Salesforce Help
          Register a Security Key as an Identity Verification Method for Salesforce Orgs

          Register a Security Key as an Identity Verification Method for Salesforce Orgs

          Register a physical security key so you can use it to verify your identity when logging in with multi-factor authentication (MFA) or if you receive a device activation challenge. You can use security keys that support the WebAuthn (FIDO2) or Universal Second Factor (U2F) standards. The registration process sets up your security key as a personal verification by creating a connection between your Salesforce account and the key. If you don’t see this option, talk to your Salesforce admin about enabling it.

          Required Editions

          Available in: both Salesforce Classic and Lightning Experience
          Available in: all editions
          Note
          Note Most major browsers support WebAuthn security keys. Chrome version 41 or later and Microsoft Edge Chromium are the only browsers that natively support U2F.
          Tip
          Tip See if your company is providing security keys for MFA logins. If not, you can use a personal security key.

          If you didn’t register a verification method before MFA was turned on for your org, you’re prompted to do so when you log in. Follow the onscreen instructions to select and register a security key, using Step 1 and Steps 5 through 6 here for extra guidance. If you’re already logged in, you can register a security key from your personal settings in Salesforce by following these steps.

          1. Have your U2F or WebAuthn security key in hand so that you’re ready to insert it when prompted. If you wait too long, your registration attempt can time out.
          2. From your personal settings, enter Advanced User Details in the Quick Find box, and then select Advanced User Details. No results? Enter Personal Information in the Quick Find box, and then select Personal Information.
          3. Click Register next to the Security Key (U2F or WebAuthn) field.
            If you don’t see this option, your Salesforce admin hasn’t enabled it for your org.
          4. For security purposes, you’re prompted to log in to your account.
          5. At the prompt, insert your security key into the appropriate port on your computer or mobile device. If it has a button, touch the button.
            Security keys aren’t biometric devices, even though some have a button that requires your touch to activate the device.
          6. After successful registration, click Continue to dismiss the confirmation message.
          Note
          Note To help keep your account secure, we send you an email notification whenever a new identity verification method is added to your Salesforce account.

          Your security key is now registered as a verification method. When logging in with MFA and Salesforce asks you to verify your identity, insert the key (and touch the button if there is one). The security key generates the required credentials, and the browser passes them on to Salesforce to complete the verification.

           
          Loading
          Salesforce Help | Article