A hardware security key must be compatible with your devices and registered to the correct Google Account. Simply plugging a newly purchased key into the computer does not make it an enrolled recovery method.
Choose the intended use
Google distinguishes a key used as a second verification step from a key holding a passkey. Its guide supports FIDO1 or FIDO2 keys for a second step, while creating a passkey on the key requires FIDO2 support.
Check the connector or NFC support you need, the key manufacturer’s compatibility guidance, and your organization’s policy before choosing hardware. Keep a practical backup arrangement if the main key is lost.
Register the key
- Use a supported, current browser on a trusted device.
- Open Google’s security-key enrollment link from the official guide.
- Confirm the full Google Account address and complete any required verification.
- Connect the key or follow the supported NFC instructions.
- Touch or unlock the key when its legitimate prompt asks you to.
- Complete setup and check the registered entry.
If your goal is a passkey on the hardware, use Google’s passkey-creation route and choose the key as the destination. Read the credential type instead of assuming every key enrollment enables passwordless sign-in.
Name and verify the entry
A meaningful key name can help you distinguish a primary key from a safely stored backup. Check the account’s entry and perform an appropriate test while another working method remains available.
Google says a newly added key may require up to seven days before it is trusted for sign-in. Follow the status shown, including any approval option using an already trusted passkey or key.
Do not remove existing access too early
Do not discard the only working key until the replacement is available. If an older FIDO2 key needs a different enrollment procedure to hold a passkey, review Google’s specific instructions before removing its current registration.
On a managed account, ask the administrator which key or passkey methods satisfy policy. A key on your desk protects the account only after the intended enrollment and verification are complete.
Browse Gmail & Google Account help
References
- Use a security key for 2-Step Verification
- Sign in with a passkey instead of a password
- Manage at-risk or new sign-in methods on your Google Account
Reviewed against the linked official and developer guidance on October 27, 2026. Available options and screen labels can vary by account, device, region, and organization policy.