Mar 05, 2019 The Microsoft Authenticator app is an effective way to use two-factor authentication to help you sign into websites that require a Microsoft Account. To use the app, you need your smartphone in. Authenticator generates 2-Step Verification codes in your browser. Use it to add an extra layer of security to your online accounts. IMPORTANT. Always keep a backup of your secrets in a safe location. Encrypting your secrets is strongly recommended, especially if you are logged into a Microsoft Account.
-->Important
This content is intended for users. If you're an administrator, you can find more information about how to set up and manage your Azure Active Directory (Azure AD) environment in the administrative documentation for Azure Active Directory.
If you're having issues signing in to your account, see When you can't sign in to your Microsoft account for help. Also, you can get more info about what to do when you receive the “That Microsoft account doesn't exist” message when you try to sign in to your Microsoft account.
The Microsoft Authenticator app helps you sign in to your accounts if you use two-factor verification. Two-factor verification helps you to use your accounts more securely because passwords can be forgotten, stolen, or compromised. Two-factor verification uses a second factor like your phone to make it harder for other people to break in to your account. You can use the Microsoft Authenticator app in multiple ways, including:
Two-factor verification. The standard verification method, where one of the factors is your password. After you sign in using your username and password, you can either approve a notification or enter a provided verification code.
Phone sign-in. A version of two-factor verification that lets you sign in without requiring a password, using your username and your mobile device with your fingerprint, face, or PIN.
Code generation. As a code generator for any other accounts that support authenticator apps.
Authenticator works with any account that uses two-factor verification and supports the time-based one-time password (TOTP) standards.
Your organization might require you to use the Authenticator app to sign in and access your organization's data and documents. Even if your user name appears in the app, the account isn't set up as a verification method until you complete the registration. For more information, see Add your work or school account.
Download and install the app
Install the latest version of the Microsoft Authenticator app, based on your operating system:
Google Android. On your Android device, go to Google Play to download and install the Microsoft Authenticator app.
Apple iOS. On your Apple iOS device, go to the App Store to download and install the Microsoft Authenticator app.
Important
If you're not currently on your mobile device, you can still get the Microsoft Authenticator app by sending yourself a download link from the Microsoft Authenticator page.
Next steps
After you download and install the app, check out the Authenticator app overview to learn more. For more setup options, see:
Authenticator app. Download and use an authenticator app to get either an approval notification or a randomly generated approval code for two-step verification or password reset. For step-by-step instructions about how to set up and use the Microsoft Authenticator app, see Set up security info to use an authenticator app.
Mobile device text. Enter your mobile device number and get a text a code you'll use for two-step verification or password reset. For step-by-step instructions about how to verify your identity with a text message (SMS), see Set up security info to use text messaging (SMS).
Mobile device or work phone call. Enter your mobile device number and get a phone call for two-step verification or password reset. For step-by-step instructions about how to verify your identity with a phone number, see Set up security info to use phone calls.
Security key. Register your Microsoft-compatible security key and use it along with a PIN for two-step verification or password reset. For step-by-step instructions about how to verify your identity with a security key, see Set up security info to use a security key.
Email address. Enter your work or school email address to get an email for password reset. This option isn't available for two-step verification. For step-by-step instructions about how to set up your email, see Set up security info to use email.
Security questions. Answer some security questions created by your administrator for your organization. This option is only available for password reset and not for two-step verification. For step-by-step instructions about how to set up your security questions, see the Set up security info to use security questions article.
You can follow these steps to add your two-factor verification and password reset methods. After you've set this up the first time, you can return to the Security info page to add, update, or delete your security information.
If you're prompted to set this up immediately after you sign in to your work or school account, see the detailed steps in the Set up your security info from the sign-in page prompt article.
If what you're seeing on your screen doesn't match what's being covered in this article, it means that your administrator hasn't turned on this experience yet. Until this experience is turned on, you must follow the instructions and information in the Set up my account for two-step verification section.
Note
If you don't see the authenticator app option, it's possible that your organization doesn't allow you to use this option for verification. In this case, you'll need to choose another method or contact your organization's help desk for more assistance.
Security vs password reset verification
Security info methods are used for both two-factor security verification and for password reset. However, not all methods can be used for both.
| Method | Used for |
|---|---|
| Authenticator app | Two-factor verification and password reset authentication. |
| Text messages | Two-factor verification and password reset authentication. |
| Phone calls | Two-factor verification and password reset authentication. |
| Security key | Two-factor verification and password reset authentication. |
| Email account | Password reset authentication only. You'll need to choose another method for two-factor verification. |
| Security questions | Password reset authentication only. You'll need to choose another method for two-factor verification. |
Set up the Microsoft Authenticator app from the Security info page
Depending on your organization’s settings, you might be able to use an authentication app as one of your security info methods. You aren't required to use the Microsoft Authenticator app, and you can choose a different app during the set up process. However, this article uses the Microsoft Authenticator app.
Important
If you have setup Microsoft Authenticator app on 5 different devices or 5 hardware tokens, you would not be able to setup a sixth one and may see the following error message.
You can't setup Microsoft Authenticator because you already have five authenticator apps or hardware tokens. Please contact your administrator to delete one of your authenticator apps or hardware tokens.
To set up the Microsoft Authenticator app
Sign in to your work or school account and then go to your https://myaccount.microsoft.com/ page.
Select Security info from the left navigation pane or from the link in the Security info block, and then select Add method from the Security info page.
On the Add a method page, select Authenticator app from the drop-down list, and then select Add.
On the Start by getting the app page, select Download now to download and install the Microsoft Authenticator app on your mobile device, and then select Next.
For more information about how to download and install the app, see Download and install the Microsoft Authenticator app.
Note
If you want to use an authenticator app other than the Microsoft Authenticator app, select the I want to use a different authenticator app link.
If your organization lets you choose a different method besides the authenticator app, you can select the I want to set up a different method link.
Remain on the Set up your account page while you set up the Microsoft Authenticator app on your mobile device.
Open the Microsoft Authenticator app, select to allow notifications (if prompted), select Add account from the Customize and control icon on the upper-right, and then select Work or school account.
Note
If this is the first time you're setting up the Microsoft Authenticator app, you might receive a prompt asking whether to allow the app to access your camera (iOS) or to allow the app to take pictures and record video (Android). You must select Allow so the authenticator app can access your camera to take a picture of the QR code in the next step. If you don't allow the camera, you can still set up the authenticator app, but you'll need to add the code information manually. For information about how to add the code manually, see see Manually add an account to the app.
Return to the Set up your account page on your computer, and then select Next.
The Scan the QR code page appears.
Scan the provided code with the Microsoft Authenticator app QR code reader, which appeared on your mobile device after you created your work or school account in Step 6.
The authenticator app should successfully add your work or school account without requiring any additional information from you. However, if the QR code reader can't read the code, you can select the Can't scan the QR code link and manually enter the code and URL into the Microsoft Authenticator app. For more information about manually adding a code, see Manually add an account to the app.
Select Next on the Scan the QR code page on your computer.
A notification is sent to the Microsoft Authenticator app on your mobile device, to test your account.
Approve the notification in the Microsoft Authenticator app, and then select Next.
Your security info is updated to use the Microsoft Authenticator app by default to verify your identity when using two-step verification or password reset.
Delete your authenticator app from your security info methods
If you no longer want to use your authenticator app as a security info method, you can remove it from the Security info page. This works for all authenticator apps, not just the Microsoft Authenticator app. After you delete the app, you'll have to go into the authenticator app on your mobile device and delete the account.
Important
If you delete the authenticator app by mistake, there's no way to undo it. You'll have to add the authenticator app again, following the steps in the Set up the authenticator app section of this article.
To delete the authenticator app
On the Security info page, select the Delete link next to the Authenticator app.
Select Yes from the confirmation box to delete the authenticator app. After the authenticator app is deleted, it's removed from your security info and it disappears from the Security info page. If the authenticator app is your default method, the default will change to another available method.
Open the authenticator app on your mobile device, select Edit accounts, and then delete your work or school account from the authenticator app.
Your account is completely removed from the authenticator app for two-factor verification and password reset requests.
Change your default security info method
If you want the authenticator app to be the default method used when you sign-in to your work or school account using two-factor verification or for password reset requests, you can set it from the Security info page.
To change your default security info method
On the Security info page, select the Change link next to the Default sign-in method information.
Choose Microsoft Authenticator - notification from the drop-down list of available methods. If you're not using the Microsoft Authenticator app, select the Authenticator app or hardware token option.
Select Confirm.
The default method used for sign-in changes to the Microsoft Authenticator app.
Additional security info methods
Microsoft Authenticator For Macbook
You have additional options for how your organization contacts you to verify your identity, based on what's you're trying to do. The options include:
Mobile device text. Enter your mobile device number and get a text a code you'll use for two-step verification or password reset. For step-by-step instructions about how to verify your identity with a text message (SMS), see Set up security info to use text messaging (SMS).
Mobile device or work phone call. Enter your mobile device number and get a phone call for two-step verification or password reset. For step-by-step instructions about how to verify your identity with a phone number, see Set up security info to use phone calls.
Security key. Register your Microsoft-compatible security key and use it along with a PIN for two-step verification or password reset. For step-by-step instructions about how to verify your identity with a security key, see Set up security info to use a security key.
Email address. Enter your work or school email address to get an email for password reset. This option isn't available for two-step verification. For step-by-step instructions about how to set up your email, see Set up security info to use email.
Security questions. Answer some security questions created by your administrator for your organization. This option is only available for password reset and not for two-step verification. For step-by-step instructions about how to set up your security questions, see the Set up security info to use security questions article.
Note
If some of these options are missing, it's most likely because your organization doesn't allow those methods. If this is the case, you'll need to choose an available method or contact your administrator for more help.
Next steps
Microsoft Authenticator App For Pc
Sign-in using the Microsoft Authenticator app, following steps in the Sign in using two-step verification or security info article.
Reset your password if you've lost or forgotten it, from the Password reset portal or follow the steps in the Reset your work or school password article.
Get troubleshooting tips and help for sign-in problems in the Can't sign in to your Microsoft account article.