---
title: Authenticating using a security key (Windows login)
description: Use your security key to authenticate for a successful sign-on to your Windows device.
component: pingid-user-guide
page_id: pingid-user-guide:secure_authentication_with_pingid:pid_using_security_key_auth_windows_login
canonical_url: https://docs.pingidentity.com/pingid-user-guide/secure_authentication_with_pingid/pid_using_security_key_auth_windows_login.html
revdate: July 13, 2023
section_ids:
  before-you-begin: Before you begin
  use-cases: Use cases
  steps: Steps
  choose-from: Choose from:
  result: Result:
---

# Authenticating using a security key (Windows login)

Use your security key to authenticate for a successful sign-on to your Windows device.

## Before you begin

* The minimum version of Windows login you need depends on the following:

  * If your organization requires you to enter a password to authenticate, you'll need PingID for Windows login 2.3 or later.

  * If your organization has eliminated passwords, you'll need PingID for Windows Passwordless login 1.2 or later.

  If you're not sure, check with your organization's administrator.

|   |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
| - | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
|   | - If your organization requires you to enter a password when you sign on, it is not possible to use a FIDO2 security key to authenticate when accessing your Windows login account through RDP. If your organization has eliminated passwords, you can do so.

- To use your security key to authenticate when you are offline, you must authenticate successfully at least once when online. For more information, see [Authenticating using a security key for manual authentication](pid_authenticating_using_security_key_manual_windows.html). |

## Use cases

The authentication flow varies slightly according to your organization's configuration policy.

* Passwordless authentication

  ![Animation showing how to authenticate with your security key when your organization does not require you to enter a username and password.](_images/security_key_passwordless_animation_wl.gif)

* Authentication with a password

  ![Animation showing how to authenticate with your security key when your organization also requires you to enter a username and password.](_images/security_key_with_password_animation_wl.gif)

## Steps

1. Sign on to your Windows laptop or desktop machine.

   ### Choose from:

   * If your organization has eliminated passwords: Under **Sign-in options**, click the PingID icon (![PingID icon](_images/obz1652790130443.png) ), and then click the arrow.

   * If your organization requires a username and password: Under **Sign-in options**, click the key icon (![frq1652790194722](_images/frq1652790194722.png)) , enter your username and password, and then click the arrow key.

   ![Windows login sign-on window](_images/bns1629124204340.png)

2. (Windows passwordless users only) If you have more than one device paired with your account, you'll see a list of your paired devices. Select the security key that you want to use to authenticate.

   ![Select Device window for passwordless authentication showing a list of paired devices.](_images/chh1652080836577.png)

3. When you see a window asking you to authenticate with your security key, connect your security key, either physically through a USB cable or, if applicable, ensure NFC or Bluetooth are set to **ON**. If you have a biometrics security key, tap it with your fingerprint to authenticate, otherwise enter your PIN code, if prompted to do so.

   ![Authentication window prompting you to authenticate with your security key.](_images/mga1652081333090.png)

   |   |                                                                                                                                                                                                                                                                                                      |
   | - | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
   |   | You might see a message indicating that you are using one or more deprecated security key. If so, you should delete all deprecated devices (deprecated devices show the **Delete** option). Before you delete a device, make sure you have at least one alternative device paired with your account. |

   ### Result:

   You are redirected to your Windows account.

   ![A screen capture of a user's Windows desktop home page.](_images/zoq1564021183904.png)