How to reset a FIDO2 Security Key

Objective

How to reset a FIDO2 Security Key.

Procedure

Here’s the clean, correct, and safe way to reset a security key that’s been registered to your Microsoft work/school account before handing it to someone else. Removing the key from your account and resetting the physical key are both required. Doing only one is not enough.

Step 1 — Remove the security key from your Microsoft work account (Entra ID)

This removes the association between your identity and the key, but does not wipe the key itself.

  1. In your browser, visit myprofile.microsoft.com and sign in using your UWin Account, if not already signed in.
  2. Click on Security Info on the left.
  3. Find the security key entry that will appear as a Passkey with the name you have given it during the registration. Click on Delete link but be careful not to delete the passkey entry associated with your Microsoft Authenticator app, if you see one.
  4. Click Delete button to confirm the removal.

    Uploaded Image (Thumbnail)

At this point, the key can no longer authenticate as you but your credential is still stored on the device. Microsoft explicitly notes that deleting the key from Security Info does not erase credentials from the physical key itself.

Step 2 — Factory‑reset the physical security key (this wipes it)

This is what actually makes the key safe to give to someone else. This method works for most FIDO2 keys (YubiKey, Feitian, etc.)

  1. Insert the security key into your computer.
  2. Open Windows Settings.
  3. Go to Accounts → Sign‑in options.
  4. Select Security key.
  5. Click Manage, you will be asked to push the button or touch the sensor on your security key.
  6. Click Reset button under Reset Security Key.
  7. Click Proceed button to confirm, and follow on‑screen prompts. You’ll be asked to take out and re-insert your key, then to touch the key—often twice—within 10 seconds.

✅ You're all set! You can now give this key to another user.

Print Article