Topics Map > Client Services

Okta - Yubikey PIN (Change or Reset)

How to change or reset the FIDO2 PIN on a UWL YubiKey using YubiKey Manager. Covers installing YubiKey Manager, navigating to the FIDO2 settings, changing an existing PIN, and performing a full FIDO reset. Includes a Windows troubleshooting note for the "Failed connecting to the YubiKey" error. Note that resetting FIDO deletes all stored credentials and requires re-enrollment in Okta.

Use YubiKey Manager to change or reset the FIDO2 PIN on your YubiKey. Changing your PIN updates the PIN while keeping your existing credentials. Resetting FIDO deletes all credentials stored on the YubiKey — you will need to re-enroll it in Okta afterward.

Install YubiKey Manager and Open FIDO2

  1. Download and install YubiKey Manager from the Yubico download page (opens in new tab).
  2. Insert your YubiKey into your computer.
  3. Open YubiKey Manager, then click Applications > FIDO2.
    YubiKey Manager with Applications menu open and FIDO2 option highlighted

Note — Windows only: If you see a "Failed connecting to the YubiKey" error:

YubiKey Manager error dialog reading 'Failed connecting to the YubiKey'

  1. Close YubiKey Manager.
  2. Right-click the YubiKey Manager icon and select Run as Administrator.
    Windows right-click context menu showing the Run as Administrator option for YubiKey Manager

Change PIN

  1. On the FIDO2 screen, click Change PIN.
    YubiKey Manager FIDO2 screen with Change PIN button
  2. Enter your current PIN, then enter and confirm your new PIN.
  3. Click Change PIN.
    YubiKey Manager Change PIN dialog with current PIN and new PIN fields

Reset PIN

Important: Resetting FIDO deletes all credentials stored on your YubiKey. You will need to remove the YubiKey as a security method in Okta and re-enroll it after completing this reset.

  1. On the FIDO2 screen, click Reset FIDO.
    YubiKey Manager FIDO2 screen with Reset FIDO button
  2. Read the confirmation prompt and click Yes.
    YubiKey Manager reset confirmation dialog warning that all FIDO2 credentials will be deleted
  3. Remove the YubiKey as a security method in Okta, then re-enroll it. See Okta — Add or Remove Security Methods (opens in new tab) for instructions.
    Okta security methods list with YubiKey entry and Remove button highlighted


Keywords:
YubiKey, YubiKey Manager, FIDO2, PIN, change PIN, reset PIN, reset FIDO, security key, Okta, two-factor authentication, 2FA, MFA, Windows, Mac, macOS, Run as Administrator, failed connecting, re-enroll, security methods 
Doc ID:
131725
Owned by:
Travis S. in UW-La Crosse
Created:
2023-09-27
Updated:
2026-03-09
Sites:
UW-La Crosse