A security key is a hardware device used for MFA. It needs no battery and no software installation to authenticate your account.
How It Works
You register the key with your Zoho account once. After that, signing in prompts you to verify using it, either by inserting it into your device's port and tapping its disc, or connecting via NFC.
Points Worth Knowing
- Zoho supports both FIDO U2F and FIDO2-based security keys.
- You can register more than one security key on your account and use any of them.
- The same key can also be registered against more than one Zoho account.
- You can sign in on mobile through the device's port or via NFC too.
Supported Browsers
| Browser | Minimum version |
|---|
| Mozilla Firefox | 60 |
| Google Chrome | 67 |
| Safari | 13 |
| Microsoft Edge | 18 |
| Opera | 54 |
| Safari on iOS | 13 |
| Opera Mobile | 64 |
| Chrome for Android | 102 |
| Firefox for Android | 101 |
Trying to sign in with a security key from an unsupported browser shows an error stating the browser isn't supported.
Registering a Security Key
You need a FIDO U2F or FIDO2-based key and a supported browser and device.
- Sign in at accounts.zoho.com and click Multi-Factor Authentication.
- Click Set up Now under Security Key.
- On a computer: insert the key into a USB port, click Next, then tap its disc once it blinks. On a mobile device: connect through the device's port or NFC area, entering your key's FIDO2 PIN if prompted.
- Name the key and click Configure.
- Sign out and back in to confirm the key works.
Repeat this to register additional keys on the same account.
Setting It as Your Primary Mode
- Sign in at accounts.zoho.com and click Multi-Factor Authentication.
- Click Make Primary next to Security Key.
- Click Confirm.
Signing In
If it's your primary mode: enter your email and password as usual, then insert the key (or connect via NFC on mobile) and tap it when prompted.
Mail clients: a mail client that doesn't support MFA will show an incorrect password error once MFA is enabled. Use an application-specific password for that client instead.
If Your Security Key Isn't Accessible
Recover your account with a backup verification code, then reconfigure your security key or another MFA mode. See recovering your account with a backup verification code. If you have no backup codes either, contact support@zohoaccounts.com to verify your identity and get a one-time backup code, then reconfigure MFA and generate a fresh set of codes once you're in.
Need help? 1 Cloud Consultants can help you roll out security keys across your organisation, including checking browser and device compatibility.
Book a discovery call with 1 Cloud Consultants.