Policy
Turn on security key sign-in
This policy setting allows you to control whether users can sign in using external security keys. If you enable this policy setting, users can sign in with external security keys. If you disable or don't configure this policy setting, users can't sign in with external security keys.
PackMicrosoft Windows
CategorySystem / Logon
Policy ID
a651d228c5c1Internal name
AllowSecurityKeySignInRegistry
Copy registry mappings
HKLM\Software\Policies\Microsoft\FIDO\EnableFIDODeviceLogon (enabled) = 1
HKLM\Software\Policies\Microsoft\FIDO\EnableFIDODeviceLogon (disabled) = 0Policy notes
This policy setting allows you to control whether users can sign in using external security keys. If you enable this policy setting, users can sign in with external security keys. If you disable or don't configure this policy setting, users can't sign in with external security keys.
Related policies
Allow users to select when a password is required when resuming from connected standbyAlways use classic logonAlways use custom logon backgroundAlways wait for the network at computer startup and logonAssign a default credential providerAssign a default domain for logonBlock user from showing account details on sign-inDo not display network selection UIDo not display the Getting Started welcome screen at logonDo not enumerate connected users on domain-joined computersDo not process the legacy run listDo not process the run once listEnumerate local users on domain-joined computersExclude credential providersHide entry points for Fast User SwitchingRun these programs at user logonShow clear logon backgroundShow first sign-in animationTurn off app notifications on the lock screenTurn off picture password sign-in