If you don’t see the option to remove or register a Security Key (U2F or WebAuthn) on a user’s Advanced User Details page, the required passkey settings may not be enabled.

Enable the Required Settings

Navigate to:

Setup → Security Controls → Identity Verification

Make sure the following options are enabled:

• • Let users verify their identity with a built-in authenticator (passkey) such as Touch ID or Windows Hello

  • Let users verify their identity with a physical security key (passkey) such as U2F or WebAuthn

Once these settings are enabled, return to the user’s Advanced User Details page. You should now be able to register, replace, or remove the user’s Security Key (U2F or WebAuthn).

This is a common issue when configuring MFA or migrating users to passkey-based authentication in Salesforce.