Microsoft Authenticator app
If you use two-factor authentication, the Microsoft Authenticator app facilitates account sign-in. Two-factor authentication increases the security of account access, particularly when viewing sensitive data. Because passwords can be forgotten, stolen, or compromised, two-factor authentication is an additional security measure that protects your account by making it more difficult for others to gain access.
The Microsoft Authenticator app can be used in multiple ways, including:
- They provide a prompt for a second verification method after a username and password have been entered.
- We provide sign-in without requiring a password by using the user’s username and a mobile device with a fingerprint, face, or PIN.
Important: This phone sign-in method is only compatible with work, school, and personal Microsoft accounts. Non-Microsoft accounts require the standard two-factor authentication procedure.
Prerequisites
Before using the Microsoft Authenticator application, you must:
- Install the Microsoft Authenticator application. If you have not already done so, download and install the application.
- Add your personal, work/school, and third-party accounts to the Microsoft Authenticator application. For comprehensive instructions, please visit Add your work or school account. Add your accounts and your accounts outside of Microsoft.
Turn on phone sign-in for work or school accounts
Phone sign-in is a kind of two-factor authentication. You must still provide a thing you know and a thing you have to validate your identity. Still, phone sign-in allows you to bypass inputting your account password and conducts complete identity verification on your mobile device.
Before enabling phone sign-in, you must enable two-factor authentication. See Add your work or school account and your personal account for further information on enabling two-factor verification for an account.
Phone sign-in is only supported on iOS and Android smartphones with Android 6.0 or above.
Turn on phone sign-in
- Launch the Microsoft Authenticator application, navigate to your work or school account, and enable phone sign-in.
- A full-screen view of the account is displayed when the account tile is tap. If you see Phone sign-in enabled, you are fully set up to sign in without your password. Tap Enable phone sign-in if it appears to enable phone sign-in.
- If you’ve used the app for two-factor authentication, you may press the account tile to view the account in full-screen mode. To enable phone sign-in, tap Enable phone sign-in.
- If you cannot locate your work or school account on the Accounts tab of the app, it is because you have not yet add it. Follow the instructions in the Add your work or school account assistance to add your work or school account.
Important: Microsoft Authenticator for iOS does not enable a mix of device registration and certificate-base authentication. Before signing in, the user must manually register the device using Authenticator settings.
First time phone sign-in
Follow the steps below to utilize the Authenticator app for passwordless phone sign-in after enabling phone sign-in:
- Provide your username on the login page.
- Chooses Next.
- If require, select Additional sign-in options.
- Selects Accept a request using my Microsoft Authenticator application.
A number is then offer to you. Instead of providing a password, the Authenticator app invites you to authenticate by typing the require number.
After you’ve use passwordless phone sign-in once, the app makes this the default option. You can always select an alternative approach.
Turn on phone sign-in for personal Microsoft accounts
You may enable phone sign-in for your personal Microsoft accounts, such as the one you use to access Outlook.com, Xbox, and Skype.
Note: The Microsoft Authenticator app requires a PIN or biometric lock on your smartphone to safeguard your account. Before enabling phone sign-in, the app prompts you to set up a security lock if your phone is unlock.
Turn on phone sign-in
Launch the Microsoft Authenticator application, navigate to your work or school account, and enable phone sign-in.
- A full-screen view of the account is display when the account tile is tap. If Phone sign-in is enable, you are set up to sign in without entering your password. Tap Enable phone sign-in if it appears to enable phone sign-in.
- If you are already using the app for two-factor authentication, you may press the account tile to view the account in full-screen mode. To enable phone sign-in, tap Enable phone sign-in.
- If you cannot locate your account on the Accounts section of the app, it is because you have not yet add it. Add your personal Microsoft account by following the instructions on the page title “Add your personal accounts.”
Sign in to your account using phone sign-in
- Instead of entering your password on the Microsoft account sign-in screen, pick the Use the Microsoft Authenticator app option.
- Microsoft sends an alert to your mobile device.
- Accept the communication.
Sign in using two-factor verification for your Microsoft account
The usual two-factor verification approach asks you to input your username and password on the device you’re using to sign in and then pick whether the Microsoft Authenticator app receives a notice or if you wish to copy the verification code from the app.
The verification codes may be found on the Accounts screen of an Android smartphone. Depending on the kind of account, these codes can be access in the Accounts panel or the full-screen view of an account on an iOS device. When you add your account to the Microsoft Authenticator app, two-step verification is enable for your account.
Note: If you do not see your work, school, or personal account on the Accounts tab of the Microsoft Authenticator app, you have not yet add the account to the app. To add your account, visit Add your school or work history or Add your account.
Refer to Sign in using two-step verification or security details for instructions on how to log in to your work, school, or personal account using the different ways of two-factor authentication.
Frequently asked questions
How is signing in with my phone more secure than typing a password?
Your data is solely use to safeguard your key locally. It is never transmitte to the cloud or kept there.
After you configure the Microsoft Authenticator app, it generates an account-unlocking key on your phone that is protecte by the PIN or biometric lock. This key is then use to authenticate your identity upon login.
Does phone sign-in replace two-step verification? Should I turn it off?
Phone sign-in is a form of two-step authentication in which both phases occur on the mobile device. You should maintain two-step verification enable to offer an extra layer of account protection.
If I keep two-step verification turned on for my account, do I have to approve two notifications?
No. Signing in to your Microsoft account using your phone also counts as two-step verification, so no further permission is necessary.
What if I lose my phone or don’t have it with me? How do I access my account?
On a sign-in screen, you can always pick the Use a password instead option to switch back to using your password. If you choose two-step verification, you will still need to prove your identity using a second method. Microsoft highly recommend that you connect your account with several current verification methods. You may alter the verification methods for individual accounts on your Security settings page.
If your administrator has enable security info for work or school accounts, you may visit your organization’s Additional security verification page or the Keep your account secure page. See the Security info (preview) Overview for additional information about security info. You must contact your administrator if you cannot manage your verification methods.
How do I stop using this feature and go back to using my password?
Select the Use a password instead link during sign-in for personal accounts. Your most recent selection saves and provide as the default option the next time you sign in. When you return to phone sign-in, pick the Use an app option during sign-in.
For business or school accounts, you must deregister the device from the Settings page of the Microsoft Authenticator app or disable it from the Devices & activities section of your profile. For additional information on deactivating your device from your profile, visit the My Apps site and click on Update your profile and account details.
Why can’t I use more than one work or school account for phone sign-in?
A phone may only associates with a single work or school account. You must deregister your account using the Settings page to enable phone sign-in for a different job or school account.
Can I sign in to my computer using my phone?
We recommend logging in with Windows Hello on Windows 10 for your machine. Windows Hello allows you to sign in using your face, fingerprint, or PIN.
Also Check This : aka.ms/authapp