See how many Keys you may need, what each one is for, and where to keep your Backup Keys.
Start from a familiar scenario. You can review and adjust the setup before adding any physical Security Key.
One Primary Key and one Backup Key for the same services.
Why it works: The easiest setup to understand, maintain, and use if the Primary Key is unavailable.
One Primary Key with two Backup Keys for the same services.
Why it works: If the Primary and one Backup cannot be used, another Backup remains available.
Keep two Backups for the same services in separate physical locations.
Why it works: Reduces the chance that theft, fire, or one local incident removes every recovery key.
Use separate groups of Keys for work and personal accounts.
Why it works: Keeps unrelated accounts separate, so each group can be checked against the right Backup Keys.
Use a Travel Key for selected services while a Backup Key remains at home.
Why it works: Limits what you carry while keeping a Backup available in another place.
Start with one repeatable Primary and Backup pair for each employee.
Why it works: Gives every assigned user a clear recovery path while the Team retains one management view.
Add a dedicated Backup Key for the services you consider most important.
Why it works: Adds another Backup where losing access would matter most, without copying every routine account.
Keep privileged administration away from everyday account access.
Why it works: Limits how often high-privilege keys are carried or exposed during routine work.
Use independent administrator keys plus an emergency Backup.
Why it works: Critical systems do not depend on one administrator or one physical key.
Separate Engineering, Finance, and IT coverage into clear management scopes.
Why it works: Avoids one company-wide comparison that mixes unrelated systems and responsibilities.
Create one custom Primary and Backup group. After saving it, choose which services each planned Key should protect.
Sign in to create a custom planRecommendations are based on your answers and NOPKEY records. Check your actual accounts and services before making changes.