The Microsoft Authenticator app helps you sign in to your accounts if you use two-factor verification. Two-factor verification helps you to access your accounts more securely, especially while viewing sensitive information. Because passwords can be forgotten, stolen, or compromised, two-factor verification is an additional security step that helps protect your account by making it harder for other people to break in.
You can use the Microsoft Authenticator app in multiple ways, including:
-
Providing a prompt for a second verification method after you sign in with your username and password.
-
Providing sign-in without requiring a password, using your username and your mobile device with your fingerprint, face, or PIN.
Important:This phone sign-in method only works with your work or school and personal Microsoft accounts. Your non-Microsoft accounts require you to use the standard two-factor verification process.
Prerequisites
Before you can use the Microsoft Authenticator app, you must:
-
Download and install the Microsoft Authenticator app. If you haven't done this yet, seeDownload and install the app.
-
Add your work/school, personal, and third-party accounts to the Microsoft Authenticator app. For the detailed steps, seeAdd your work or school account,Add your personal accounts, andAdd your non-Microsoft accounts.
(Video) How to set up authenticator on a new phone | Azure Active Directory
Turn on phone sign-in for work or school accounts
Phone sign-in is a type of two-step verification. You must still verify your identity by providing a thing you know and a thing you have, but phone sign-in lets you skip entering your account password and performs all of your identity verification on your mobile device.
Before you can turn on phone sign-in, you must turn on two-factor verification. For more information about how to turn on two-factor verification for an account, seeAdd your work or school accountandAdd your personal accounts.
Phone sign-in is available only on iOS and on Android devices running Android 6.0 or above. If you have trouble turning on phone sign-in on Android, see Common questions about the Microsoft Authenticator app.
Turn on phone sign-in
-
Open the Microsoft Authenticator app, go to your work or school account, and turn on phone sign-in.
-
When you tap the account tile, you see a full screen view of the account. If you seePhone sign-in enabledthat means you are fully set up to sign in without your password. If you seeEnable phone sign-in, tap it to turn on phone sign-in.
-
If you’ve already been using the app for two-factor verification, you can tap the account tile to see a full screen view of the account. Then tapEnable phone sign-into turn on phone sign-in.
-
If you can't find your work or school accounton theAccountsscreen of the app, it means that you haven't added it to the app yet. Add your work or school account by following the steps in theAdd your work or school account help.
(Video) How to use Microsoft Authenticator
Note:Microsoft doesn't support a combination of device registration and certificate-based authentication in Authenticator on iOS. Instead, the user must register the device manually through Authenticator settings before signing in.
First time phone sign-in
After you turn on phone sign-in, use the following steps to use the Authenticator app forpasswordless phone sign-in:
-
Enteryour username at the sign-in page.
-
Selects Next.
-
If necessary, selectsOther ways to sign in.
-
SelectsApprove a request on my Microsoft Authenticator app.
You are then presented with a number. The Authenticator app prompts you to authenticate by typing the appropriate number, instead of by entering a password.
After you have used passwordless phone sign-in once, the app then offers youthis method as the default. You are always able to choose another method.
Turn on phone sign-in for personal Microsoft accounts
You can turn on phone sign-in for your personal Microsoft account, such as the account you use to sign in to Outlook.com, Xbox, or Skype.
Note:To help protect your account, the Microsoft Authenticator app requires a PIN or biometric lock on your device. If you keep your phone unlocked, the app requires you to set up a security lock before turning on phone sign-in.
Turn on phone sign-in
Open the Microsoft Authenticator app, go to your work or school account, and turn on phone sign-in.
-
When you tap on the account tile, you see a full screen view of the account. If you seePhone sign-in enabledthat means you are fully set up to sign in without your password. If you seeEnable phone sign-in, tap it to turn on phone sign-in.
-
If you’re already using the app for two-factor verification, you can tap the account tile to see a full screen view of the account. Then tapEnable phone sign-into turn on phone sign-in.
-
If you can't find your accounton theAccountsscreen of the app, it means that you haven't added it to the app yet. Add your personal Microsoft account by following the steps in theAdd your personal accountsarticle.
(Video) How To Setup Microsoft Authenticator App Microsoft 365 Email
Sign in to your account using phone sign-in
-
Go to your personal Microsoft account sign-in page, and then instead of typing your password, select theUse the Microsoft Authenticator app insteadlink.
-
Microsoft sends a notification to your phone.
-
Approve the notification.
Sign in using two-factor verification for your account
The standard two-factor verification method requires you to enter your username and password into the device you're signing in to, and then choose whether the Microsoft Authenticator app receives a notification or if you want to copy the verification code from the Authenticator app. On an Android device, the verification codes can be found on theAccountsscreen. On an iOS device, these verification codes can be found in theAccountsscreen or the full screen view of an account depending on the type of account. You turn on two-factor verification for your account when you add the account to the Microsoft Authenticator app.
Note:If you don't see your work or school account or your personal account on theAccountsscreen of the Microsoft Authenticator app, it means that you haven't added the account to the Microsoft Authenticator app. To add your account, seeAdd your work or school accountorAdd your personal accounts.
For the steps necessary to sign in to your work or school or your personal account, using the various methods of two-factor verification, seeSign in using two-step verification or security info.
Frequently asked questions
| Question | Solution |
| How is signing in with my phone more secure than typing a password? | Your data is used only to protect your key locally. It’s never sent to, or stored in, the cloud. After you set up the Microsoft Authenticator app, it creates a key on your phone to unlock your account that’s protected by your phone’s PIN or biometric lock. This key is then used to prove your identity while signing in. |
| Does phone sign-in replace two-step verification? Should I turn it off? | Phone sign-in is a type of two step verification where the two steps both happen on the mobile device. You should keep two step verification turned on to help provide additional security for your account. |
| If I keep two-step verification turned on for my account, do I have to approve two notifications? | No. Signing in to your Microsoft account using your phone also counts as two-step verification, so there is no second approval required. |
| What if I lose my phone or don’t have it with me? How do I access my account? | You can always select the Use a passwordinstead link on a sign-in page to switch back to using your password. If you use two-step verification, you’ll still need to use a second method to verify your identity.Microsoft strongly recommends thatyou have more than one up-to-dateverification method associated with your account.You can manage your verification methods for personal accounts from yourSecurity settingspage. For work or school accounts, you can go to your organization’sAdditional security verificationpage or theKeep your account securepage if your administrator has turned on security info. For more information about security info, seeSecurity info (preview) overview. If you can't manage your verification methods, you have to contact your administrator. |
| How do I stop using this feature and go back to using my password? | For personal accounts, select theUse a password insteadlink during sign in. Your most recent choice is remembered and offered by default the next time you sign in. If you ever want to go back to using phone sign-in, select theUse an app insteadlink during sign in. For work or school accounts, you must either unregister the device from theSettingspage of the Microsoft Authenticator app, or disable the device from theDevices & activityarea of your profile. For more information about disabling your device from your profile, seeUpdate your profile and account info from the My Apps portal. |
| Why can’t I use more than one work or school account for phone sign-in? | A phone must be registered to a single work or school account. If you want to turn on phone sign-in for a different work or school account, you must unregister your account from this device through theSettingspage. |
| Can I sign in to my computer using my phone? | For your computer, we recommend signing in using Windows Hello on Windows 10. Windows Hello lets you use your face, fingerprint, or PIN to sign in. |
Next steps
If you're having trouble getting your verification code for your personal Microsoft account, see theTroubleshooting verification code issuessection of thearticle.
FAQs
How do I sign into Microsoft authenticator app? ›
- Sign in to an application or service such as Microsoft 365 using your username and password.
- Microsoft prompts you for a verification code.
- Open the Microsoft Authenticator app on your phone and enter the code in the box where you are signing in.
To generate a new QR code, click Add sign-in method and select Authenticator app from the list of options. You'll then be told that you need to install the app, which is fine because it's already on the device. Click Next to start the setup process and click Next again to see a new QR code for the app (Figure 2).
What is my Microsoft authenticator account? ›The Microsoft Authenticator app helps you sign in to your accounts if you use two-factor verification. Two-factor verification helps you to access your accounts more securely, especially while viewing sensitive information.
How do I get my 6 digit code from authenticator? ›You need to install the Google Authenticator app on your smart phone or tablet devices. It generates a six-digit number, which changes every 30 seconds. With the app, you don't have to wait a few seconds to receive a text message.
How do I sign into Microsoft authenticator on my new phone? ›Open the Microsoft Authenticator app on your mobile device and select Begin recovery. Sign in to your recovery account using the personal Microsoft account you used during the backup process. Your account credentials are recovered to the new device.
How do I get my Authenticator code without QR code? ›If your camera is unable to capture the QR code, you can manually add your account information to the Microsoft Authenticator app for two-factor verification. This works for work or school accounts and non-Microsoft accounts.
How to get QR code for Microsoft Authenticator app without old phone? ›What if you don't have access to Microsoft Authenticator on your old phone? If you no longer have your old phone, it was stolen, lost or damaged, you'll need to contact Microsoft Support. The virtual agent will ask if the answers are helpful or not, click “No” to then have the option to talk to a person for help.
Why is my Authenticator app QR code not working? ›My Authy or Google Authenticator App won't scan the barcode. Try restarting your mobile device and begin again. If this doesn't work then try removing the scanner app (does not apply to Apple iOS) and reinstalling it. Restart the mobile device and try scanning the barcode again.
Why do I have to use Microsoft authenticator? ›A: Microsoft Authenticator acts as a secure repository for your account credentials to help you authenticate and access various applications conveniently. Authenticator may list inactive accounts that are created by other applications that use Authenticator for single sign-on support.
How do I get the 6 digit code for Authenticator app for iPhone? ›From your iPhone, iPad, or iPod touch
If your device is online: Go to Settings > [your name]. Tap Password & Security > Get Verification Code.
How to get 6 digit code from Authenticator app instead of 8? ›
Settings>Passwords>App Ask for 6 digit code. It'll be in there updating over and over like the actual Authenticator apps do.
How many digits is the Microsoft Authenticator code? ›Authenticator 6 and 8 digit codes - Microsoft Q&A.
How do I reset my Microsoft authenticator account? ›Go to the security settings of your Microsoft account, either on a web browser or on a different device. Click on the "Security info" option and sign in to your account. Under the "Security info" section, locate the "Authenticator app" and click on "Manage". Click on the "Remove" option next to the lost device.
How do I transfer my Authenticator to a new phone without my old phone? ›Transfer Google Authenticator without an old phone
You can't transfer Google Authenticator to a new phone without the old phone, but you can switch your Authenticator key to a new phone by logging into the 2-step verification section of your account settings and clicking Change authenticator app.
A common fix for any problems with the authenticator app is to update your software. Ensure your device and all apps are up to date. For more support on the authentication app, you can view the authenticator app set-up video, or you can visit Microsoft's support pages.
How do I get the QR code for Authenticator app on iphone? ›- On your new phone, install the Google Authenticator app.
- In the Google Authenticator app, tap Get Started and sign in.
- Tap Menu Transfer accounts. Import accounts.
- On your old phone, create a QR code: In the Authenticator app, tap Menu Transfer accounts. Export accounts. ...
- On your new phone, tap Scan QR code.
Open the Microsoft Authenticator app on your mobile device. Click I agree after reviewing the privacy statement. Select Scan a QR code.
How do I regenerate QR code for Microsoft Authenticator? ›Another solution is to go to the Office 365 admin center and select Users and then Active users. Then, you can select your account and click Manage multifactor authentication. There, you can disable your MFA and then enable it again. This will generate a new QR code that you can scan with your new phone.
How to export QR code from Microsoft Authenticator to new phone? ›- Tap on Transfer Accounts.
- Tap on Export Accounts.
- Choose the account information that you wish to transfer. ...
- On your new phone. ...
- Tap on Transfer Accounts.
- Tap on Import Accounts.
- Tap on Scan QR Code.
- Use your camera on your new phone to scan the QR code on your old phone.
What you have to do is go to https://mysignins.microsoft.com and under security and info you can manage log in verification methods. just delete Microsoft authenticator as an option and then re add it and it will allow you back in!!!
How to set up 2 step verification on Microsoft Authenticator app? ›
- Select More security options.
- Under Two-step verification, choose Set up two-step verification to turn it on, or choose Turn off two-step verification to turn it off.
- Follow the instructions.
Go to https://account.microsoft.com, on the "Security" tab in the "Additional Security Options" section click on "Microsoft Authenticator App" click on "Remove".
What is the difference between Authenticator app and Microsoft authenticator? ›What Are The Differences? Microsoft Authenticator can support one account on multiple devices while Google Authenticator doesn't. Microsoft Authenticator has a feature that lets you hide the code useful to protect your account.
What is the one time password code Microsoft Authenticator? ›The email one-time passcode feature is a way to authenticate B2B collaboration users when they can't be authenticated through other means, such as Azure AD, Microsoft account (MSA), or social identity providers.
What is the key for the Authenticator app? ›What Does Key Mean on Google Authenticator? The key is the QR code or the 32-digit code on Google Authenticator account details. It is provided in the 2-factor authentication settings, which can either be scanned or manually entered into the Authenticator app.
Do I have to use the Authenticator app? ›You aren't required to use the Microsoft Authenticator app, and you can choose a different app during the set up process.
What do I do if I don t have access to the trusted number on my Apple ID? ›If you use security questions with your Apple ID, or if you don't have access to a trusted device or phone number, go to iforgot.apple.com. Then you can unlock your account with your existing password or reset your password.
How do I bypass two factor authentication on my iPhone? ›Once you enable two-factor authentication (2FA) on your iCloud account, you cannot turn it off. Therefore, there is no way to bypass two-factor authentication for iCloud.
What is Microsoft authenticator secret key? ›The secret key is like a secondary password shared between the authenticator app on your device and your Knowledge Hub account. If you have multiple devices, they must all share the same secret key.
Why isn t my 6 digit authentication code working? ›This is usually due to a temporary network or connection issue. Please try to log in when you have a strong WiFi and/or cellular signal.
How do I change my authenticator verification number? ›
Go to Settings > Security > Two-factor authentication and click on Manage. Click Change next to your phone number to update it. You will receive a text message with a verification code.
Why is Microsoft sending me 6 digit code? ›If you forget your password, or if someone else is trying to take over your account, we send a verification code to that alternate email or phone number. When you give the code back to us, we know that you're really you so we can help get you back into your Microsoft account.
How do I sign into Microsoft authenticator without QR code? ›If your camera is unable to capture the QR code, you can manually add your account information to the Microsoft Authenticator app for two-factor verification. This works for work or school accounts and non-Microsoft accounts.
Why can't I open Microsoft authenticator app? ›A common fix for any problems with the authenticator app is to update your software. Ensure your device and all apps are up to date. For more support on the authentication app, you can view the authenticator app set-up video, or you can visit Microsoft's support pages.
How to recover Microsoft Authenticator app without old phone? ›What if you don't have access to Microsoft Authenticator on your old phone? If you no longer have your old phone, it was stolen, lost or damaged, you'll need to contact Microsoft Support. The virtual agent will ask if the answers are helpful or not, click “No” to then have the option to talk to a person for help.
How do I reset my Microsoft authenticator app? ›Go to the security settings of your Microsoft account, either on a web browser or on a different device. Click on the "Security info" option and sign in to your account. Under the "Security info" section, locate the "Authenticator app" and click on "Manage". Click on the "Remove" option next to the lost device.
How do I recover my Microsoft account without authenticator? ›Go to the Microsoft account recovery page (https://account.live.com/password/reset) and try to reset your password by providing information about your account, such as the email address or phone number associated with it.
Why can't i login Microsoft account Authenticator? ›What you have to do is go to https://mysignins.microsoft.com and under security and info you can manage log in verification methods. just delete Microsoft authenticator as an option and then re add it and it will allow you back in!!!
What happens if I lost my phone Microsoft authenticator? ›Since you lost your device with the Authenticator App, you can try unregistering your old device, or if you have other admins within your tenant, you can have them require you to re-register for MFA, to see if that resolves your issue.
What happens if I lost my Authenticator app? ›If, however, you don't have Google Authenticator installed on another device, you won't be able to recover your authenticator and all your codes. Fortunately, you can still recover your account and access it. You'll be able to do this if your phone number or email is linked to your account.
How do I regenerate QR code for Microsoft authenticator? ›
Another solution is to go to the Office 365 admin center and select Users and then Active users. Then, you can select your account and click Manage multifactor authentication. There, you can disable your MFA and then enable it again. This will generate a new QR code that you can scan with your new phone.
How do I reset my Authenticator account? ›- Go to Security.
- Under Multi-factor Authentication, click Reset Authenticator App.
- Verify your existing setup using your old device. Warning: If you exit the process before you complete setup, you may lock yourself out of resources that are protected by your Authenticator App.