Add a second compatible security key to each account while your primary key still works. Enroll the spare, test it in a sign-in flow, then keep it somewhere secure and separate from the key you carry. The steps differ for Apple, Google, and Microsoft accounts, and a key registered with one service is not automatically registered with another.
Before you add a second security key
Check the account service’s requirements and match the key’s connector or NFC support to the devices you actually use. FIDO certification alone does not mean every account has security-key sign-in enabled. Buy and enroll the spare before the original is lost or removed.
As an Amazon Associate I earn from qualifying purchases.
- Confirm the key is supported by the service and your phone or computer.
- Keep another supported recovery method current where the service offers one.
- Give the spare a recognizable name if the account allows it.
- Test the spare before storing it in a separate secure location. Apple suggests keeping keys in more than one place, such as home and work; Google recommends keeping an extra key somewhere safe.
How do I add a backup security key to my account?
Apple Account
Apple Account Security Keys are a dedicated account-security feature, not just an additional second-step key. You need two-factor authentication, at least two FIDO Certified keys that work with your Apple devices, and compatible software: iOS 16.3, iPadOS 16.3, or macOS Ventura 13.2 or later. Apple allows up to six keys and requires that you maintain at least two. Child accounts and Managed Apple Accounts are not supported. See Apple’s Security Keys requirements and guidance.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Clear out junk files and repair common Windows errorsFree Scan →- On iPhone or iPad: Open Settings > your name > Sign-in & Security > Two-Factor Authentication > Security Keys > Add Security Keys. Follow the prompts to register the spare.
- On Mac: Choose Apple menu > System Settings > your name > Sign-in & Security > Two-Factor Authentication > Security Keys > Set Up, then follow the prompts.
- Sign in with the new key to confirm it works before putting it away.
Apple warns that setup signs inactive devices out. A device that cannot be updated to compatible software may not be able to sign in again. If a key is unavailable, a trusted iPhone or iPad already signed in to the account can help you sign in to a new device. Apple’s iPhone guide to Security Keys explains the feature and its backup-key use.
#1 Best Overall
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Check connector fit before buying: Apple lists YubiKey 5C NFC and YubiKey 5Ci as examples for most Mac and iPhone models, and FEITIAN ePass K9 NFC USB-A for older Macs and most iPhones. NFC keys work only with iPhone; USB-C works with iPhone 15 or later and most Macs; Lightning works with iPhone 14 and most earlier iPhones; USB-A works with older Macs and newer Macs through a USB-C-to-USB-A adapter. Confirm compatibility across all the devices you use.
Google Account
Google accepts FIDO1 or FIDO2 security keys as a second step for 2-Step Verification. If you want to create a passkey on the hardware key and, where supported, sign in without a password, the key must be FIDO2. Enroll it through your Google Account security-key enrollment flow using a current compatible browser or operating system, then follow the prompts. Google’s security key setup and sign-in guidance notes that a newly added key may take seven days to become available at sign-in; an existing trusted passkey or key may speed up trust establishment.
Rank #2
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Add another way to prove your identity where possible. Depending on your account and settings, Google lists verification codes, Google prompts, backup codes, another enrolled security key, or a previously trusted computer as possible alternatives. If you can sign in using another second step after losing a key, remove the lost key from the account, get a replacement, and enroll it. If you have no other second step or have forgotten your password, Google says recovery may take 3–5 business days; this is a possible duration, not a guarantee. See Google’s guidance for a lost security key.
Recommended Free Tools
Microsoft personal account
- Sign in to your Microsoft account and go to Security > More security options > Add a new way to sign in or verify > Use a security key.
- Choose USB or NFC, then insert or tap the key.
- Create or enter the key’s PIN and touch its button or gold disk if it has one.
- Name the key, finish setup, and test it in a sign-in flow.
Manage or remove enrolled keys in the account’s security settings. Microsoft’s personal-account security-key instructions cover enrollment and management.
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Microsoft work or school account
Enrollment depends on your organization. An administrator must enable the option, the key must be FIDO2 and approved as Microsoft-compliant by the organization, and you must already have at least one additional security verification method registered.
- Open My Profile > Security Info > Add method > Security key.
- Choose USB or NFC and follow the prompts to set a PIN and name the key.
- Test the key if your organization’s sign-in process allows it.
If Security key does not appear, contact your organization’s help desk; its policy may not permit enrollment. See Microsoft’s work and school security-key setup guidance.
Rank #4
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
What happens if I lose my security key?
Use another enrolled key or an account-approved recovery method to regain access, then remove the lost key from the account and enroll a replacement. The available recovery routes and timing depend on the service: Google may require account recovery if you have no other second step, while Microsoft work and school sign-in can also depend on organizational policy. Do not wait until the primary key is gone to find out whether the spare works; test it while you can still access the account.
Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Repair Windows errors before they cause bigger problems3Fix the driver behind crashes, sound loss and screen glitchesQuick Recap
Best Value
- Security Key : Protect your online accounts against unauthorized access by using FIDO2 and U2F authentication with T110. It's the world's most protective security key that works with windows, Mac OS, Linux as well as Chrome, Firefox, Edge and many other major browsers.
- Certified with the new FIDO2 standard, T110 provides the benefit of fast login and strong protection against phishing, account takeover as well as many other online attactks.
- Works with : Bank of America, Github, Google, Microsoft, DUO, Twitter, Facebook, Dropbox, Apple, ebay, BINANCE, mor and more.
- Fits USB-A port : Insert the T110 security key into the USB-A port of each service and log in conveniently with one touch
- For the driver download and user guide, please visit TrustKey Solutions Home support page.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
