Microsoft 365 / Entra ID

Microsoft 365 and Microsoft Entra ID support modern login methods where a physical security key can be used as a strong, phishing-resistant factor.

Why this is relevant

Accounts for email, documents, and administration are attractive targets. FIDO2 authentication offers greater resistance to phishing than methods where a code can be intercepted.

How a YubiKey helps

A suitable FIDO2 YubiKey links the login to the actual service and to physical possession of the key. Availability depends on policy and configuration within the Microsoft tenant.

Practical implementation

Start with administrators and risk groups, document registration and recovery, and provide a backup key where necessary. Test policies with a limited pilot group first.