Use Microsoft Authenticator for easy, secure sign-ins for all your online accounts using multi-factor authentication, passwordless, or password autofill. You also have additional account management options for your Microsoft personal, work or school accounts.
Getting started with multi-factor authentication
Multi factor authentication (MFA)provides a second layer of security. When enabled, during login after entering your password, you’ll be asked for an additional way to prove it’s really you. Either approve the notification sent to the Microsoft Authenticator, or enter the one-time password (OTP) generated by the app. The OTP codes have a 30 second timer counting down. This timer is so you never have to use the same time-based one-time password (TOTP) twice and you don’t have to remember the number. The OTP doesn’t require you to be connected to a network, and it won’t drain your battery. You can add multiple accounts to your app, including non-Microsoft accounts like Facebook, Amazon, Dropbox, Google, LinkedIn, GitHub, and more.
Getting started with passwordless
Use your phone, not your password, to log into your Microsoft account. Just enter your username, then approve the notification sent to your phone. Your fingerprint, face ID, or PIN will provide a second layer of security in this two-step verification process. After you’ve signed in with two factor authentication (2FA), you’ll have access to all your Microsoft products and services, such as Outlook, OneDrive, Office, and more.
Getting started with autofill
Microsoft Authenticator app can also autofill passwords for you. Sign-in on the Passwords tab inside the Authenticator app with your personal Microsoft account to start syncing passwords, including the passwords saved in Microsoft Edge. Make Microsoft Authenticator the default autofill provider and start autofilling passwords on apps and sites you visit on your mobile. Your passwords are protected with multi-factor authentication in the app. You will need to prove yourself with your fingerprint, face ID, or PIN to access and autofill passwords on your mobile. You can also import passwords from Google Chrome and other password managers.
Microsoft personal, work or school accounts
Sometimes your work or school might ask you to install the Microsoft Authenticator when accessing certain organization resources. You will need to register your device to your organization through the app and add your work or school account. Microsoft Authenticator supports cert-based authentication by issuing a certificate on your device. This will let your organization know that the sign-in request is coming from a trusted device and help you seamlessly and securely access additional Microsoft apps and services without needing to log into each.
Show less
Summary of user reviews
Positive highlights
🔒
This app hasSecure authentication for Microsoft and other accounts
🔑
This app hasPasswordless sign-in for Microsoft accounts
📱
This app hasConvenient to use on iPhone and Apple Watch
🔄
This app hasBackup and restore functionality for accounts
🔍
This app hasAbility to group and organize accounts
Negative highlights
🔒
This app hasAccounts can get locked out if app is deleted or phone is changed
⌚️
This app hasApple Watch functionality is unreliable or broken
🔍
This app hasLack of customization options for account organization
🤯
This app hasConfusing and frustrating user experience for some users
🔑
This app hasDifficult to recover accounts if backup/restore doesn't work
🔒
This app hasSecurity features can be inconvenient for some users
🐞
This app hasBugs and issues with the app, especially after updates
What's New in Microsoft Authenticator
6.8.20
December 9, 2024
We're always working on new features, bug fixes, and performance improvements. Make sure you stay updated with the latest version for the best authentication experience.
I’m begging you to PLEASE update your Apple Watch app so that we can reply to login requests that require us to enter a number on our Watch. It is more than possible within the confines of how WatchOS works. I try to keep my phone away while I’m working. But every time I log into any work account, I have to dig it out. There’s no reason for this! The notification shows up on my Apple Watch, and it’s very easy to enter numbers into an Apple Watch. But for some reason, you don’t let me. This is such an easy fix and would improve your product dramatically.
Other complaints: - why does every authentication request require TEO Face ID scans? That doesn’t make sense either. - I had to change my password recently, so to log into the Authenticator app again, I needed to get authentication codes…which I couldn’t get because I wasn’t logged in with my new password. I figured out a way around it, but it was very confusing and that process needs to be made much simpler.
