![](\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\"){kind=icon}
<\/p><\/div>
- \n
- To enroll Windows devices with device authenticator, Windows Hello must already be set up.<\/li>\n\n\n\n
- You may already be using a security key with Verification Code (TOTP) MFA. A security key used with Verification Code (TOTP) MFA is different from the security key mentioned in this article and won\u2019t work for the processes described below. <\/li>\n<\/ul>\n <\/div><\/div><\/div><\/div>\n\n\n\n
Setting Up a Security Key or Device Authenticator<\/strong><\/h2>\n\n\n\n
Your IT admin may register security keys for you. In this case, you aren\u2019t required to do any additional setup. Alternatively, your admin may have you register a security key for your user account. Device authenticators are always enrolled from the User Portal.<\/p>\n\n\n\n
<\/p><\/div>Note:<\/strong> You need to have a security key with you to successfully register a security key with JumpCloud.<\/p><\/div><\/div><\/div>\n\n\n\n
To register a security key for your user account<\/strong>:<\/p>\n\n\n\n
- \n
- Log in to your User Portal: https:\/\/console.jumpcloud.com\/login<\/a> <\/strong><\/li>\n\n\n\n
- In the Set Up Multi-Factor Authentication<\/strong> modal, select Security Key<\/strong> or Device Authenticator<\/strong>, then click continue.<\/strong><\/li>\n\n\n\n
- Edit the display name if you’d like, then click REGISTER KEY<\/strong>. <\/li>\n\n\n\n
- Follow the browser prompts to insert the security key or enroll the device authenticator. \n
- \n
- Browser prompts can differ in behavior and messaging. <\/li>\n<\/ul>\n<\/li>\n\n\n\n
- After the security key or device authenticator is successfully registered, add another key or click X <\/strong>to close the modal.<\/li>\n<\/ol>\n\n\n\n<\/p><\/div>
Note:<\/strong> You can also add security keys or device authenticators at any time from the Security area in the User Portal.<\/p><\/div><\/div><\/div>\n\n\n\n
Viewing Your MFA Status<\/strong><\/h2>\n\n\n\n
To view, add, edit, and delete your security keys or device authenticators:<\/strong><\/p>\n\n\n\n
- \n
- Log in to your User Portal: https:\/\/console.jumpcloud.com\/login<\/a> <\/strong><\/li>\n\n\n\n
- Under Security<\/strong>, you can see the current status of all forms of MFA.<\/li>\n\n\n\n
- Any older security keys (including device authenticators) have been renamed to ‘legacy keys’. You can rename or delete these keys, but you can’t add a new security key to this area. We recommend re-enrolling these keys as Security Keys or Device Authenticators and then deleting the original legacy key. However, you won’t be blocked from continuing to use the legacy key.<\/li>\n<\/ol>\n\n\n\n<\/p><\/div>
Note:<\/strong> If you have multiple security keys or device authenticators, consider using the display label to help keep them identifiable. Use the pencil icon to edit the display label. However, if your admin registered a security key for you, you can\u2019t edit the display label.<\/p><\/div><\/div><\/div>\n\n\n\n
Logging into Resources with a Security Key or Device Authenticator<\/strong><\/h2>\n\n\n\n
Security keys and device authenticators can be used for logging into the User Portal, SSO apps, and for changing your JumpCloud password.<\/p>\n\n\n\n
If you don\u2019t see a particular MFA option, get in touch with your admin.<\/p>\n\n\n\n
- \n
- When logging into the User Portal, you have 60 seconds to provide your security key or device authenticator. If you have a removable security key, insert it into your computer before you log in.<\/li>\n\n\n\n
- For logging into SSO apps, follow the same steps as for your user portal, unless you’re using SSO directly from the app, the availability of which varies by app.<\/li>\n\n\n\n
- When resetting your JumpCloud user password from the User Portal, and email will be sent to your user account email address. When following the prompts, you can elect to use your security key or device authenticator for MFA.\n
- \n
- When changing your password, you have five minutes to use the security key or device authenticator before the token expires.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n\n
![](\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/tip-icon.png\")
<\/p><\/div>Tip:<\/strong> \nIf your security key fails, change the MFA factor to authenticate to your User Portal. If you continue to experience problems, contact your admin.<\/p>\n\n\n\n
- \n
- Security Keys work with Chrome, FireFox, and Edge.<\/li>\n\n\n\n
- Device Authenticator Touch ID only works with Chrome.<\/li>\n\n\n\n
- Neither security keys nor device authenticators are supported with Internet Explorer or Safari.<\/li>\n<\/ul>\n\n\n\n
Here’s a guided simulation: User Portal MFA Webauthn Login<\/a>.<\/p>\n <\/div><\/div><\/div><\/div>\n","protected":false},"excerpt":{"rendered":"
- When changing your password, you have five minutes to use the security key or device authenticator before the token expires.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n\n