See how many keys you may need, what each key is for, and where to store your backup keys.
Start from a familiar scenario. You can review and adjust the plan before linking any physical Security Key.
One Primary key and one Backup intended for the same services.
Why it works: The easiest setup to understand, maintain, and recover from.
One Primary with two Backups intended for the same services.
Why it works: If one key and one Backup become unavailable, another recorded recovery path remains.
Keep two Backups for the same services in separate physical locations.
Why it works: Reduces the chance that theft, fire, or one local incident removes every recovery key.
Use separate Key Sets for unrelated work and personal accounts.
Why it works: Keeps account scopes understandable and prevents one mixed Key Set from producing misleading coverage guidance.
Use a limited Travel key while a same-service Backup remains at home.
Why it works: Balances convenience, travel exposure, and a dependable recovery path.
Start with one repeatable Primary and Backup pair for each employee.
Why it works: Gives every assigned user a clear recovery path while the Team retains one management view.
Add a dedicated Backup for only the services you consider critical.
Why it works: Applies extra redundancy where the recovery consequence is highest without copying every routine account.
Keep privileged administration away from everyday account access.
Why it works: Limits how often high-privilege keys are carried or exposed during routine work.
Use independent administrator keys plus an emergency Backup.
Why it works: Critical systems do not depend on one administrator or one physical key.
Separate Engineering, Finance, and IT coverage into clear management scopes.
Why it works: Avoids one company-wide comparison that mixes unrelated systems and responsibilities.
Create one custom Key Set. You can choose intended services for each planned position after the plan is created.
Sign in to create a custom planNOPKEY recommendations are management guidance calculated from your answers and recorded data. They do not verify third-party registrations or certify regulatory compliance.