Microsoft Authenticator App
Using two-step verification, the Microsoft Authenticator app can help you sign in to your accounts. Two-factor verification helps you to access your accounts more securely, especially while viewing sensitive information. Because passwords can be lost, stolen, or broken, two-factor verification is an extra security step that makes it harder for people to get into your account.
You can do many things with the Microsoft Authenticator app, such as:
- After you sign in with your username and password, you will be asked for a second verification method.
- You use your username and mobile device with your fingerprint, face, or PIN to sign in instead of a password.
Necessary: You can only use this way to sign in to your Microsoft account at work, school, or at home. You must use the standard two-factor verification process for your accounts that Microsoft doesn’t make.
It would help if you did the following before you can use the Microsoft Authenticator app:
- Get the Microsoft Authenticator app and put it on your computer. See Download and set up the app if you haven’t done this yet.
- The Microsoft Authenticator app lets you add your work/school, personal, and third-party accounts. See Add your work or school account, your personal accounts, and your non-Microsoft accounts for more information on how to do this.
Turn on phone sign-in for work or school accounts
Two-step verification is a type of phone sign-in. You still have to prove who you are by giving something you know and something you have, but with phone sign-in, you don’t have to enter your account password, and all of your identity verification is done on your phone.
It would help if you turned on two-factor verification before you can use phone sign-in. See Add your work or school account and personal accounts for more information on how to turn on two-factor verification for an account.
Phone sign-in is only available on devices with iOS or Android 6.0 or higher.
Turn on phone sign-in
- Open the Microsoft Authenticator app, go to your work or school account, and turn on phone sign-in.
- When you tap the account tile, you can see the account on the whole screen.If you see “Phone sign-in enabled,” you can sign in without entering your password. Tap Enable phone sign-in if you see it. This will turn on phone sign-in.
- If you have already been using the app for two-factor verification, you can tap the account tile to see a full-screen view of the account. Then tap Enable phone sign-in to turn phone sign-in on.
- If you can’t find your work or school account on the Accounts screen of the app, it means you haven’t added it yet. Add your work or school account by following the steps in the Add your work or school account help.
Note: Microsoft doesn’t let Authenticator on iOS use both device registration and authentication based on a certificate. Before signing in, the user must manually register the device through the Authenticator settings.
First time phone sign-in
After you turn on phone sign-in, you can use the Authenticator app for password-free phone sign-in by doing the following:
- On the page where you sign in, enter your username.
- He chooses to go on.
- If you need to, choose Sign in other ways.
- Chooses, “Approve a request on my Microsoft Authenticator app.”
After that, you are given a number. Instead of entering a password, the Authenticator app asks you to verify your identity by typing the correct number.
The app makes this the default method when you use passwordless phone sign-in for the first time. You can always choose a different way.
Turn on phone sign-in for personal Microsoft accounts
You can turn on phone sign-in for your personal Microsoft accounts, like the one you use to sign in to Outlook.com, Xbox, or Skype.
Note: The Microsoft Authenticator app needs a PIN or a biometric lock on your device to help keep your account safe. If you leave your phone unlocked, the app will ask you to set up a security lock before you can use phone sign-in.
Turn on phone sign-in
Open the Microsoft Authenticator app, go to your work or school account, and turn on phone sign-in.
- When you tap on the account tile, the account takes up the whole screen. If you see “Phone sign-in enabled,” you can sign in without entering your password. Tap Enable phone sign-in if you see it. This will turn on phone sign-in.
- If you are already using the app for two-factor verification, you can tap the account tile to see a full-screen view of the account. Then tap Enable phone sign-in to turn phone sign-in on.
- If you can’t find your account on the app’s Accounts screen, it’s because you haven’t added it yet. Follow the steps in the article “Add your accounts” to add your own Microsoft account.
Sign in to your account using phone sign-in
- Go to the page where you sign in to your personal Microsoft account. Instead of typing in your password, click the link that says Use the Microsoft Authenticator app instead.
- Your phone gets a message from Microsoft.
- Approve the message.
Sign in using two-factor verification for your account
The standard two-factor verification method requires you to enter your username and password on the device you’re using to sign in. You can then choose whether the Microsoft Authenticator app will be notified or if you want to copy the verification code from the app.
You can find the verification codes on the Accounts screen on an Android phone or tablet. Depending on the type of account, these verification codes can be found on an iOS device in the Accounts screen or the full-screen view of an account.
When you add your account to the Microsoft Authenticator app, you turn on two-factor verification for your account.
Note: If your work, school, or personal account doesn’t show up on the Accounts screen of the Microsoft Authenticator app, it means you haven’t added the account to the app. Add your work or school account, or Add your accounts to add your account.
See Sign in using two-step verification or security info for the steps you need to take to sign in to your work, school, or personal account using two-step verification. For More Information Visit : Our Page
Frequently asked questions
How do I get the QR code for the Authenticator app?
Can I log into Windows with Authenticator?
Currently, the Microsoft Authenticator app is only available on mobile devices. To make your Windows login more secure, you should enable MFA on your Microsoft account on a Windows 10 or 11 device.
Does Authenticator app require Microsoft account?
The Microsoft Authenticator app saves your account passwords and other app settings in the cloud, like the order of your accounts.
Important: For your recovery account to work, you need a personal Microsoft account. iOS users need an iCloud account as well.
How is signing in with my phone more secure than typing a password?
Your information is only used to keep your crucial safe locally. It’s never sent to the cloud or stored there. After you set up the Microsoft Authenticator app, it creates a key on your phone that you can use to unlock your account. This key is protected by the PIN or fingerprint lock on your phone. Then, when you sign in, this key is used to prove who you are.
Does phone sign-in replace two-step verification? Should I turn it off?
Phone sign-in is a type of two-step verification where both steps are done on the mobile device. It would help if you kept two-step verification on so that your account is protected in more ways.
If I keep two-step verification turned on for my account, do I have to approve two notifications?
No.Using your phone to sign in to your Microsoft account also counts as two-step verification, so you don’t need to give a second OK.
What if I lose my phone or don’t have it with me? How do I access my account?
On a sign-in page, click Use a passwordinstead to use your password. Using two-step verification requires a second method of identification. Microsoft advises using multiple up-to-date verification methods. Security options let you manage account verification methods.
If your administrator has enabled security info for work or school accounts, visit Additional security verification or Keep your account secure. Security info (preview) has more details. Managing verification methods requires contacting an administrator.
How do I stop using this feature and go back to using my password?
Sign in to personal accounts using a password. The next time you sign in, your most recent choice is provided by default. Use the Use an app instead link to return to phone sign-in.
Unregister the device from the Microsoft Authenticator app’s Settings page for business or school accounts, or disable it from your profile. To remove a device from your profile, visit the My Apps portal.
Why can’t I use more than one work or school account for phone sign-in?
One work or school account per phone. You must unregister your account from this device through Settings to use phone sign-in for a separate work or school account.
Can I sign in to my computer using my phone?
Only one work or school account can be connected to a phone. If you want to turn on phone sign-in for a different work or school account, you need to unregister your account from this device through the Settings page.