Adding security keys to your AGOV account

Description

You want to register another security key as an additional login factor in your AGOV account. By registering additional login factors, you can avoid being locked out of your AGOV account if a login factor is lost or faulty. A list of AGOV-compatible security keys can be found at Security keys that can be used in AGOV.

You can also register a third party's security key, in order to authorise that person to use your AGOV login. You can find information on sharing your AGOV account with third parties in the Sharing your AGOV account with third parties help article.

Instructions

Notes
  • We recommend that you always register at least 2 login factors in your AGOV account, in order to avoid being locked out of your account.
  • A maximum of 10 security keys can be registered in the AGOV account.
  • You can also register a third party's security key, in order to authorise that person to use your AGOV login. You can find information on sharing your AGOV account with third parties in the [sharedthirdparties] help article.
Adding new security keys
The prompts may vary depending on the Windows or MacOS version.

  1. Log in to your (agov.ch/me) AGOV account with an existing login factor (AGOV access app or security key).
    This image shows the login page of AGOV, where a QR code is visible.
    Click on the image to enlarge

  2. Go to Login factors.
    Vista dal conto AGOV cun la tscherna da la sparta facturs da login.
    Section of login factors.

  3. Go to Security keys and click on Add security key.
    Screen with personal AGOV details of the login factors with the option to add a security key.
    Add security key

  4. Read the instructions on confirming the transaction.
    Note that you have to confirm the transaction to add a new security key.
    Confirm transaction.

  5. Confirm registration with the login factor that you used to log in to your AGOV account.

    Confirmation with AGOV access app on smartphone or tablet ▼
    ×

    The prompts may differ depending on the Android and iOS version.

    1. You will receive a push notification from AGOV access app, which will be displayed in the status bar on your smartphone or tablet. Click on the push notification to confirm the entries with the AGOV access app.
      Request for confirmation of push message in the AGOV access app.
      Push message sent.


      The status bar displays the push notification received for confirmation.
      Push message in the status bar on an Android smartphone.


      iPhone: The notification centre displays the push notification received for confirmation.
      Push message in the notification centre on an iPhone.


      If no push notification is displayed, check whether push notifications for the AGOV access app are enabled (see help article: Why doesn't the AGOV access app receive push notifications?).


    2. Confirm using your PIN, fingerprint or Face ID.
      Confirm the push message in the AGOV access app with your PIN, fingerprint or Face ID.
      Confirmation with fingerprint in the AGOV access app.


    3. Click on Continue to finalise the confirmation.
      Successful registration is displayed in the AGOV access app.
      Click Continue to finalise.



    Confirmation with security key on Windows ▼
    ×

    The prompts may vary depending on the Windows version.
    1. Click on Start confirmation.
      Image with the instructions for confirmation with the security key is displayed.
      Start confirmation.


    2. Select the security key option and connect it to your PC's USB port.
      Select the Security Key option.
      Selecting and connecting the security key.


    3. Enter your security key PIN.
      Enter the security key PIN.
      Enter the PIN of the security key.


    4. Tap to confirm your security key.
      Prompt to tap the security key.
      Tap the security key.



    Confirmation with security key on MacOS ▼
    ×

    The dialogue may differ depending on the MacOS version and the web browser used.

    Dialog with Safari web browser

    1. Click on Start Verification.
      Image with the instructions for confirmation with the security key is displayed.
      Start confirmation.


    2. Select the Security Key option.
      Select the Security Key option.
      Selecting the security key.


    3. Attach the security key to your Mac and tap it.
      Connect the security key to your Mac, tap it.
      Connect the security key to your Mac, tap it.


    4. Enter the PIN of your security key. Tap the security key to confirm.
      Enter the security key PIN.
      Enter PIN security key.


      Re-insert the security key and activate it.
      Re-insert the security key and activate it.


    Dialog with Chrome and Firefox web browser
    1. Click on Start Verification.
      Image with the instructions for confirmation with the security key is displayed.
      Start confirmation.


    2. Select the Security Key option.
      This image shows the selection of the passkey for agov.admin with the USB security key option.
      Select the Security Key option.


    3. Connect the security key to your Mac and tap it.
      Prompt to insert and press the security key.
      Insert and press the security key.


    4. Enter the PIN of your security key. Tap the security key to confirm.
      Enter the security key PIN.
      Enter the security key PIN.


      Prompt to tap the security key.
      Tap the security key.


  6. Read the instructions and click on Start security key registration.
    Image with instructions for registering a security key.
    Registering the security key.

  7. Open the instructions for your PC/laptop operating system.

    Windows ▼
    ×

    1. Select the option Security key and connect it to your computer's USB port. In newer Windows versions, the first step is to select the option Use another device.
      Register the security key under other devices
      Register the security key under other devices

      Image with the option to select the security key as a passkey.
      Select the security key as the passkey.


    2. Confirm the next two prompts.
      Confirm the Windows security message to set up the security key.
      Confirm Windows security message.


      Confirm the Windows security message to set up the security key.
      Confirm Windows security message.


    3. Enter your security key PIN. If the security key has never been used before, you can set a new PIN.
      Image to enter the PIN of the security key.
      Enter the security key PIN.


      Image to set a new PIN and repeat if the security key has never been used before.
      Set a new PIN and repeat it if the security key has never been used.


    4. Tap to confirm your security key.
      An image asking them to tap their security key.
      Tap your security key.


    5. The security key has been successfully registered as a login factor.
      Image confirming that the security key has been registered as a login factor.
      Successful registration of your security key.


    MacOS ▼
    ×

    Notes
    To use security keys on Macs, a PIN must be set before using them for the first time.

    1. Chrome
      Use the Chrome browser to set the PIN on a new security key:
      • Open Chrome and type chrome://settings/securityKeys into the address bar.
      • Insert the FIDO2 key into your computer.
      • Follow the instructions to set or change your PIN.

    2. Safari browser and Firefox browsers
      If the security key is registered in the Safari browser, the PIN must be set in accordance with the security key manufacturer's instructions. Once the PIN has been set, the security key can be registered in the AGOV account. If no PIN was set before registration, the following error message appears:
      Image with error message if no PIN was set before registration.
      Error message if no PIN was set before registration.


    3. User guides for security keys are available on the following manufacturers' support websites:
      Token2 security key
      Youbico security key

    Registering the security key
    The prompts may vary depending on the MacOS version and the web browser used.

    Safari web browser prompts

    • Select the Security key option.
      Screen with options to log in with a smartphone or security key.
      Login with security key.


    • Connect the security key to your Mac's USB port.
      Image with the prompt to insert the security key into the USB port.
      Insert the security key into the USB port.


    • Enter your security key PIN. Tap to confirm your security key.
      Image to enter the security key PIN with the prompt to tap on the key afterwards.
      Attach the security key and tap.



    Chrome and Firefox web browser prompts
    • Select the Security key option.
      Picture showing the selection of possible passkeys. Select the USB security key.
      Select the USB security key.


    • Connect the security key to your Mac's USB port.
      Image with the prompt to tap to connect your security key to your Mac.
      Attach the security key and tap on it.


    • Enter your security key PIN. Tap to confirm your security key.
      Image for entering the existing PIN of the security key.
      Enter the existing PIN for the security key.


      Chrome web browser only: If the security key has never been used, you can define a new PIN.
      Image to enter and repeat a new PIN for the security key.
      Set and confirm a new PIN for the security key.



  8. The new security key is listed under "Login factors". You can now use it for AGOV logins.
    Screen with personal AGOV login factor details and confirmation that the security key has been successfully added.
    Security key was successfully added.

Related help articles

Removing security keys from the AGOV account
Registering a new account with a security key


Were we able to help you?
 
Read more help articles →