Discord Security Key: How to Add and Use One

A Discord security key is a physical FIDO2 device, such as a YubiKey or Google Titan key, that you register as a second sign-in factor for your Discord account. To add one, open User Settings > My Account, select Register a Security Key under Password and Authentication, confirm your password, then insert or tap the key when your browser or operating system asks. Save the backup codes Discord shows at the end.

This guide covers what a security key does on Discord, how it differs from a passkey, the exact setup steps on desktop and mobile, how signing in works afterwards, and what to do if a key is lost or stops working.

What is a security key on Discord?

A security key on Discord is a hardware authenticator that proves you are present when you sign in, in addition to your password. Discord treats security keys and passkeys as its recommended form of multi-factor authentication (MFA), ahead of authenticator apps and SMS codes, according to its two-factor authentication help page.

Both options use the WebAuthn standard. When you register a key, a key pair is created: the private part stays on the key or your device, and Discord only stores the public part. At sign-in, Discord sends a challenge that only the matching private key can answer, and the answer is bound to discord.com. That binding is the main security benefit: a phishing site on a lookalike domain cannot collect a usable response, while a six-digit authenticator code can be typed into a fake page and replayed by an attacker.

Discord's passkeys and security keys article lists what you need: either a device with a fingerprint reader, face recognition or screen lock, a password manager that stores passkeys, or a hardware security key. Popular hardware options include YubiKey devices, Google's Titan Security Key and Thetis keys.

Security key vs passkey on Discord

A passkey and a security key are registered in the same Discord menu, but they behave differently at sign-in. A passkey can replace your password entirely, while a hardware security key generally works as the second step after your password.

Discord allows up to 16 security keys or passkeys per account, so you can combine both: a synced passkey for daily use and a hardware key kept as a spare.

How to add a security key to Discord on desktop

Adding a security key to Discord on the desktop app or in a browser takes about a minute and starts in the My Account page of User Settings.

1. Open Discord in the desktop app or at discord.com and sign in.
2. Click the cog next to your username to open User Settings, then select My Account.
3. In the Password and Authentication section, click Register a Security Key.
4. Confirm your password, and complete any existing MFA challenge if Discord asks for one.
5. Click Let's go.
6. In the browser or operating system dialog that asks where to save the passkey, pick the security key option instead of the phone or the built-in device option.
7. Insert the key into a USB port (or hold it to the NFC reader) when prompted, then touch the key's button.
8. Set a PIN for the key if it does not have one yet, or enter the existing PIN.
9. Give the key a name in Discord so you can tell multiple keys apart later.
10. Download the backup codes Discord shows and store them somewhere safe.

The "insert your security key into the USB port" message comes from Windows, macOS or the browser, not from Discord. If it does not react, try another port, remove any USB hub, or check that the key supports FIDO2.

How to add a security key or passkey in the Discord mobile app

The Discord mobile app registers keys from the Account section of its settings. Discord documents these steps:

1. Tap your avatar in the bottom-right corner, then the settings cog in the top-right corner.
2. Go to Account and select Security Keys.
3. Tap Add, and confirm your password or current MFA method if asked.
4. Save the passkey in your password manager, or tap Other Options to use a hardware key (NFC keys work by holding them to the back of the phone).
5. Name the key and tap Finish.
6. Download and store your backup codes.

Password managers such as Bitwarden, NordPass and KeePassXC can store the passkey so it is available on your other devices.

How to sign in to Discord with a security key

Signing in to Discord with a hardware security key adds one step after your password: Discord shows an MFA screen, you choose Authenticate with security key, and you touch or tap the key.

Once a key is registered, the My Account page shows that multi-factor authentication is enabled, lists the key by the name you gave it, and offers View Backup Codes.

With a passkey stored in a password manager, the login can skip the password. Discord prompts you to pick the saved passkey, or you can select Or, sign in with Passkey on the login screen and complete the device check, such as a fingerprint or Face ID.

Backup codes and what to do if you lose your key

Backup codes are your recovery path when a Discord security key is lost, broken or left at home. Each code works once, and Discord states that it cannot recover an account for you if you lose access to both your MFA methods and your backup codes.

• Store the codes in a password manager or print them and keep them hidden.
• View or download them any time in My Account under View Backup Codes, which also marks codes you have already used.
• Register a second key or a passkey so one lost device does not lock you out.
• After signing in with a backup code, generate fresh codes and remove the lost key from your account settings.

If a passkey stops working, Discord recommends signing in with your password and using another MFA method or a backup code, registering a new passkey, and then deleting the old one in Account settings. Remaining backup codes stay valid during this process.

FAQ

Related: manage passkeys in Windows 11, turn on Instagram two-factor authentication, authenticator apps for Android and iOS