Setting Up a Yubikey (FIDO2) as an Authentication Method

Prerequisites / Minimum Requirements

The purpose of this guide covers recommended phishing-resistant devices and users registration of device for Creighton Single Sign-On.

Why Use Yubikeys (FIDO2)

YubiKeys provide phishing-resistant MFA and passwordless sign-in through the FIDO2 standard. They protect against credential theft, MFA fatigue, and account compromise while making authentication faster and easier. No more typing complex passwords, resetting forgotten credentials, or approving unexpected MFA prompts. Simply insert or tap your YubiKey to securely access your accounts.  

Please note that the university will not provide YubiKeys. Individuals who choose to use a YubiKey for phishing-resistant MFA or passwordless sign-in are responsible for purchasing their own device. A list of supported models and purchasing recommendations is available below.  

When purchasing your key, please select the model that is compatible with the ports available on your workstation. 

Recommended Yubikeys

Model Recommendation Link to Purchase
Yubikey 5 NFC by Yubico USB-A + NFC https://www.yubico.com/us/product/yubikey-5-series/yubikey-5-nfc/
Yubikey 5C NFC by Yubico USB-C + NFC https://www.yubico.com/us/product/yubikey-5-series/yubikey-5c-nfc/

End State / Outcome

User will be informed on which Yubikey to purchase and how to register the device as an authentication method.

How to Steps

 

1. Browse to MySignins.

2. Select Add sign-in method

3. Choose Passkey

4. Select Next

5. Select Security Key and click Next

6. Click OK

7. Insert Yubikey

8. Create a PIN when prompted

9. Touch the key sensor

10. Assign a friendly name

 

Login Experience

After signing into Creighton resources, you will be prompted to select Security Key, enter the previously created security PIN, and touch the YubiKey. This will complete successful authentication, and you will be allowed to access applications. 

 If you have further questions or experience issues, contact the Service Desk at 402-280-1111. 

If this article did not help, please review the Related Articles in the right hand column or select the Related Services / Offerings and choose Report an Issue or Problem to open a ticket with the Service Desk.
Print Article

Related Articles (2)

This article provides the steps to ensure that Microsoft Authenticator is your multi factor authentication (MFA) method for verifying your Creighton sign in.
This video explains how to download and set up Microsoft for Multifactor Authentication (MFA).