Duo Security Key – Multi-Factor Authentication MFA Tokens & Passcodes

Buy Duo Security Key – MFA Authentication Tokens & Passcodes

Cisco Duo Security Key supports hardware security keys from Yubico and FEITIAN for multi-factor authentication (MFA). However, compatibility depends on the Duo authentication flow: Duo Universal Prompt supports WebAuthn/FIDO2 security keys, while U2F-only authentication is not supported in the Universal Prompt.

FEITIAN FIDO Security Keys Supported by Cisco Duo Security Key

FIDO2/U2F security keys suitable for Cisco Duo Security Key 2-Step Verification

FEITIAN FIDO2 security keys

for Cisco Duo Security Key documents FEITIAN ePass FIDO keys as supported for Duo Windows Logon/RDP offline access. For browser-based Duo Universal Prompt, choose a FIDO2/WebAuthn-capable model; Duo’s policy documentation identifies FEITIAN as an example of a supported roaming-authenticator vendor.

Yubico YubiKey FIDO Security Keys Supported by Cisco Duo Security Key

FIDO2/U2F security keys suitable for Cisco Duo Security Key 2-Step Verification

for Cisco Duo Security Key documents Yubico YubiKey FIDO keys as supported for Duo Windows Logon/RDP offline access. For browser-based Duo Universal Prompt, choose a FIDO2/WebAuthn-capable model; Duo’s policy documentation identifies Yubico YubiKey as an example of a supported roaming-authenticator vendor.

Important distinctions

• Duo Universal Prompt: Requires WebAuthn; U2F-only keys are not supported.
• Duo Passwordless: Requires FIDO2 user verification, typically a security-key PIN or biometric.
• Duo Windows Logon offline MFA: Duo explicitly lists the FEITIAN ePass FIDO family as supported. Its documentation recommends testing the exact key before bulk deployment.