Physical 2FA key for Windows logon

[GigabitXe]

I am going to college this fall and I am looking to step up my digital security a little bit. I know that enabling two-factor authentication is one of the easiest ways to increase the security of your accounts and I already have it enabled on all of my online accounts. The only thing I don't have it on is when signing in to my Windows desktop. The only way I can figure out how to add more security to my windows logon (besides have a strong password/PIN) it to use a physical security key. I am totally fine with this, but my question is if I use a physical key to logon, will I still have to put in my pin? The ideal situation for me would be to type in my PIN and then be prompted for the security key before I am able to log into windows. Is this how it works? Also would a key like this work for this use case?

[iawindowss]

I don't think that key would work that is more for once your in you computer you can use it to log into websites, games, apps... etc. If it does work for windows login I would be quite surprised. 

[GigabitXe]

4 minutes ago, BlueScope819 said:

I think the better way to go about that is to use Windows Hello along with Bitlocker so you have to enter your password for Bitlocker in addition to having to use your fingerprint to login, of course your login password would also be something that's just insanely strong that's different from your Bitlocker password. You can buy a USB fingerprint reader for Windows Hello

I will look into that. Thanks for the suggestion!

3 minutes ago, iawindowss said:

I don't think that key would work that is more for once your in you computer you can use it to log into websites, games, apps... etc. If it does work for windows login I would be quite surprised. 

This was one of the images from the product page, which is makes me think it would work for that purpose. 

[iawindowss]

3 minutes ago, GigabitXe said:

I will look into that. Thanks for the suggestion!

This was one of the images from the product page, which is makes me think it would work for that purpose. 

Strange I guess so hmm

[Master Disaster]

There's always something like this..

 

https://www.amazon.co.uk/Yubico-Security-USB-Factor-Authentication-Blue/dp/B07M8YBWQZ/ref=sr_1_15?dchild=1&keywords=windows+hello&qid=1596903378&sr=8-15

 

It uses NFC so you pair it with your phone/watch and as long as your phone is on you when you go back to your computer it unlocks. Can't say I've ever used one though so not sure how well they actually work.