> For the complete documentation index, see [llms.txt](https://docs.k9.io/key9-identity/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.k9.io/key9-identity/ssh/installation-and-setup/setting-a-yubikey-pin-without-yubikey-software./2.-using-webauthn.io-to-register-a-new-yubikey-pin..md).

# 2. Using "webauthn.io" to register a new Yubikey PIN.

<https://webauthn.io> is a site that allows you to test Passkeys (also known as "Webauthn") on your device.    If you have a new,  unprotected Yubikey,  we can use <https://webauthn.io> to force the initialization to assign a PIN.&#x20;

1. Plug in your unprotected Yubikey
2. Go to <https://webauthn.io>
3. Once at the site,  enter a bogus username (it doesn't matter what) and click on "register".

<figure><img src="/files/2diGnJBXuv5lAJolDV1G" alt=""><figcaption><p>webauthn.io website</p></figcaption></figure>

5. At this point,  you should be prompted to select a device you wish to store your new "Passkey".  Select the "User a different phone, table, or *security key*".&#x20;

![](/files/26FIX1zFHLhoRy68DkyL) &#x20;

6. At this point, you may be prompted with a QR code.   At this point,  press your Yubikey.

<figure><img src="/files/VsIozy1b6UJGPr9ggXNw" alt=""><figcaption><p>QR code or Security Key selection</p></figcaption></figure>

7. At this point,  your browser should detect that your Yubikey is not protected.   You should be prompted to PIN protect your Yubikey.

<figure><img src="/files/wAVNcktVq5AS7iXk9KAb" alt=""><figcaption><p>PIN protect your Yubikey</p></figcaption></figure>

8. Upon verification and hitting "Next",  your Yubikey will be protected by the PIN. &#x20;
9. At this point, you can remove the Yubikey and stop the registration process.