Microsoft Authenticator

After using Microsoft Authenticator, you can easily and securely log in to all your online accounts through multi-factor authentication, passwordless, or password autofill. You can also get additional account management options for your Microsoft personal, work, or school accounts.

Getting started with multi-factor authentication

Multi-factor authentication (MFA) provides a second layer of security. Once enabled, during the login process after entering your password, the system will require an additional method to verify it's actually you. You can approve the notification sent to Microsoft Authenticator or enter the one-time password (OTP) generated by the app. The timer for the OTP code counts down for 30 seconds. With this timer, you never have to use the same time-based one-time password (TOTP) twice and don't have to remember the number. The OTP doesn't require an internet connection and doesn't drain the battery. You can add multiple accounts to the app, including non-Microsoft accounts such as Facebook, Amazon, Dropbox, Google, LinkedIn, GitHub, etc.

Getting started with passwordless

Log in to your Microsoft account using your phone instead of a password. Just enter your username and then approve the notification sent to your phone. Your fingerprint, Face ID, or PIN will provide the second layer of security in this two-factor authentication process. After logging in with two-factor authentication (2FA), you'll have access to all Microsoft products and services such as Outlook, OneDrive, Office, etc.

Getting started with autofill

The Microsoft Authenticator app can also autofill passwords for you. Log in with your personal Microsoft account on the "Passwords" tab in the Authenticator app to start syncing passwords, including those saved in Microsoft Edge. Set Microsoft Authenticator as the default autofill provider and start autofilling passwords on the apps and sites you access on your mobile device. Passwords are protected by multi-factor authentication in the app. You need to use your fingerprint, Face ID, or PIN to prove your identity to access and autofill passwords on your mobile device. You can also import passwords from Google Chrome and other password managers.

Microsoft personal, work, or school accounts

Sometimes, when accessing certain organizational resources, your work or school may require you to install Microsoft Authenticator. You need to register your device with the organization through the app and add your work or school account. Microsoft Authenticator issues a certificate on your device to support certificate-based authentication. This lets your organization know that the login request is coming from a trusted device and helps you access every other Microsoft app and service seamlessly and securely without having to log in again.