Configure passwordless sign-in on Surface Hub

Passwordless sign-in simplifies access to your apps, meetings, and files. Surface Hub supports signing in using the Microsoft Authenticator app and FIDO2 security keys provided by your organization.

Important: This content is intended for users. To use passwordless sign-in, your IT admin must enable passwordless authentication for your organization. For more information, see:

Configure sign-in using Microsoft Authenticator app

Note: Starting with Windows 10 Team 2020 Update, users can use their preferred email aliases in Azure AD, as well as their User Principal Name (UPN), to sign in using Microsoft Authenticator. For example, a user can use either their preferred alias ( or their UPN ( to sign in.

The Microsoft Authenticator app helps you sign-in to Surface Hub using your mobile device. To configure sign-in using Microsoft Authenticator:

  1. On your mobile device, download the Microsoft Authenticator app.
  2. On your PC, setup the Microsoft Authenticator app from the Security info page for your work or school account.
  3. From the Microsoft Authenticator app on your mobile device, turn on and use phone sign-in for your work or school account.

Configure sign-in using FIDO2 security keys


Passwordless sign-in on Surface Hub using FIDO2 security keys requires the Windows 10 Team 2020 Update.


Surface Hub only supports USB security keys.

You can also sign into Surface Hub using a FIDO2 security key provided by your organization.

To configure sign-in using a security key:

  1. On your PC, go to your page and sign in to your work or school account.
  2. Select Security info from the left navigation pane or from the link in the Security info block, and then select Add method from the Security info page.
  3. On the Add a method page, select Security key from the drop-down list, and then select Add.
  4. On the Security key page, choose USB device.
  5. Have your security key ready and select Next.
  6. In the dialog box that appears, follow the instructions to insert the security key, create or enter a PIN, and perform the required gesture (either biometric or touch).
  7. On the Security key page, give your security key a name, then select Next.
  8. Select Done to complete the process.

to Surface Hub

Once you've configured passwordless sign-in, you can use it to make it easier to access your apps, meetings, and files on the Surface Hub:

  • Quickly join your meetings and open recent Microsoft 365 files. For more information, see Sign in to see your meetings and files.
  • Quickly sign in to Microsoft apps like Whiteboard, PowerPoint, Word, Excel, OneDrive, and Power BI.
  • Quickly sign in to the new Microsoft Edge to access your favorites and browsing preferences. For more information, see Install and configure the new Microsoft Edge.
  • Once you've signed into Surface Hub, you can use other apps without having to sign in again until you select End session. Selecting End session deletes your credentials, files, and personal data from the device. For more information, see End session.

Learn more