Adding the AmbiSecure card as a FIDO security key in Facebook Accounts Center
Pair a hardware FIDO key with a Facebook account in under 90 seconds. Covers the security key tab under settings, registration, and verification.
Hosted on YouTube. Open in YouTube →
Registering the card on a Facebook account (desktop)
On a desktop browser the AmbiSecure card registers over USB as a security key for Facebook two-factor authentication. Facebook keeps this under its Security and login / two-factor settings.
- Open Facebook Settings & privacy → Settings and go to Password and security.
- Open Two-factor authentication and choose your account.
- Select Security keys and choose Add (enable another 2FA method first if Facebook requires one).
- Insert the AmbiSecure card into a USB reader when prompted and touch it to register.
- Give the key a name and confirm — Facebook will ask for it on future logins.
Before you start
Facebook treats a security key as an additional two-factor method rather than a standalone one, which shapes the setup order:
- Enrol another 2FA method first. Facebook generally requires an authenticator app or SMS to be active before it will accept a security key, and it keeps that method as a fallback.
- Register from a desktop browser. The first enrolment is most reliable over USB on a desktop; the NFC tap flow is covered in the mobile walkthrough.
- Save your recovery codes while you are in the two-factor settings. They are the escape hatch if the card and your fallback method are both unavailable.
- Have a USB smart-card reader connected before you begin, so the browser prompt does not time out while you hunt for one.
What is specific to Facebook accounts
The setting has moved more than once. On current builds two-factor settings live under Accounts Center, reachable from Settings & privacy, and older builds keep them under Password and security. Both routes land on the same two-factor page, and the security-key option behaves identically once you are there.
Two behaviours catch people out:
- Accounts Center can span several profiles. If your Facebook and Instagram accounts share an Accounts Center, the two-factor page asks which account you are configuring. A key registered to one profile does not automatically protect the other — check the selector before enrolling.
- Facebook may not always prompt for the key. On surfaces where a security key is not supported, Facebook falls back to your authenticator app or SMS method rather than refusing the login. That is expected, and it is why the fallback method stays enrolled.
If the registration does not complete
- The security-key option is greyed out — two-factor authentication is not fully enabled yet. Finish enrolling an authenticator app first, then return.
- The browser prompt never appears — confirm you are on an HTTPS page in a WebAuthn-capable browser. Facebook's flow will not start over a proxied or downgraded connection.
- The tap is not registered — leave the card seated in the reader until Facebook confirms. Pulling it as soon as the reader LED changes aborts the ceremony.
Related engineering writing
Implementing FIDO2 Authentication — A Complete Developer Guide
A practical walk through FIDO2 registration and authentication, attestation, and the bits people get wrong.
Passkeys vs Traditional MFA
Where passkeys actually replace MFA, where they don't, and how to think about device-bound vs synced credentials.
Need a pilot, datasheet, or technical conversation?
Tell us the form factor, target deployment, and certification needs. Our engineering team will follow up directly.
Frequently asked questions
Do I need another two-factor method before adding a security key to Facebook?
Yes. Facebook generally requires an active authenticator app or SMS method before it will accept a security key, and it keeps that method enrolled as a fallback.
Where are Facebook's security key settings now?
On current builds they sit under Accounts Center, reached from Settings & privacy; older builds place them under Password and security. Both routes reach the same two-factor page.
Does registering a key on Facebook also protect my Instagram account?
Not automatically. If the accounts share an Accounts Center, the two-factor page asks which account you are configuring, so check the selector and enrol each account you want protected.
Why does Facebook sometimes ask for my authenticator app instead of the card?
On surfaces that do not support security keys, Facebook falls back to your other enrolled two-factor method rather than blocking the login. That is expected behaviour, not a failed registration.
What happens if I lose the security key registered to Facebook?
Log in using the authenticator app or SMS method Facebook required you to keep enrolled, or use one of the recovery codes saved during setup, then remove the lost key from the two-factor settings.