What Is a FIDO2 Security Key?
Posted On 2026 年 5 月 7 日
What Is a FIDO2 Security Key?
A FIDO2 security key is a small hardware device used to verify your identity when logging in to an account or system. It connects via USB or NFC, and some models include a fingerprint sensor for additional verification.
How it works
When you register with a service, the key generates a unique cryptographic key pair. The private key is stored on the device and never leaves it. The public key goes to the server. When you log in, the service sends a challenge, the key signs it, and access is granted. No password is transmitted.
In practice: plug in the key, tap it or press a button, and you’re in. No password to type, no code to copy from your phone.
Where it works
FIDO2 security keys work across major browsers and operating systems, including Windows, macOS, iOS, and Android. They are supported by services such as Microsoft 365, Google Workspace, and enterprise applications including VPNs and ERP systems.
Because the standard is maintained by the FIDO Alliance and W3C, keys from different manufacturers work with the same services. No proprietary platform required.
What problem it solves
Passwords and one-time codes are shared secrets. Information that can be phished, intercepted, or leaked in a breach. Attackers have gotten effective at building fake login pages that capture one-time codes in real time and use them before they expire. FIDO2 security keys are not vulnerable to this.
Authentication is bound to the exact domain of the service. If a user is directed to a fake login page, the key will not respond, even if the page looks identical to the real one.
This makes FIDO2 the foundation for phishing-resistant MFA, a requirement in frameworks such as Zero Trust, NIST SP 800-63, and CISA guidelines.
What Is a FIDO2 Security Key? Q&A
Q1：What connection types do FIDO2 security keys support?
A：Most keys support USB-A or USB-C. Many also support NFC for use with mobile devices.
Q2：Do I need to install any software to use a FIDO2 security key?
A：No. FIDO2 security keys work natively with all major browsers and operating systems.
Q3：Can one security key be used for multiple accounts?
A：Yes. One key can be registered with multiple services and accounts without limitation.
Q4：Is biometric data stored on the device or on a server?
A：On the device. Fingerprint data never leaves the security key and is not shared with any service.
Q5：Are FIDO2 security keys from different manufacturers compatible with the same services?
A：Yes. Because FIDO2 is an open standard maintained by the FIDO Alliance and W3C, keys from different manufacturers work with the same services.
訂閱偉康科技洞察室部落格，掌握最新科技趨勢！
專人協助
由偉康業務人員為您詳細說明偉康的解決方案，以及相關產業經驗。
About The Author
