Download Microsoft Authenticator

Microsoft Authenticator generates time-based verification codes and can approve sign-in requests as an additional security check. You can use it with a personal, work, or school Microsoft account, as well as many services that support standard authenticator codes. Depending on the account and its settings, it may also support passwordless sign-in, passkeys, or autofill. Available features vary by account, device, and service.

Yes. Microsoft Authenticator can store verification codes for many third-party services that support authenticator apps, including accounts that use standard time-based one-time passwords. You typically add an account by scanning a QR code or entering a setup key provided by that service. Some Microsoft-specific features, such as approving work or school sign-ins, are available only when supported by the relevant Microsoft account and organization.

The app can generate many verification codes without an internet connection because the codes are based on a shared setup key and the device’s clock. However, approving a push notification, completing a cloud restore, or using certain account and passwordless sign-in features may require connectivity. Keep your device’s date and time accurate, and make sure you have another recovery method available in case your phone is lost or unavailable.

Microsoft Authenticator may offer backup and restore options, but the process and what can be restored depend on your device platform, account type, and current app settings. Restoring a backup does not necessarily reactivate every account; some work, school, or third-party accounts may require you to sign in or register the new phone again. Before changing devices, check the app’s backup settings and each service’s recovery instructions.

Microsoft Authenticator adds a second step to sign-in and can make account access more resistant to password-only attacks, but it does not eliminate every security risk. Protect your phone with a screen lock, install app updates, and never approve a sign-in you did not initiate or share a verification code with anyone. Keep passwords unique, review account recovery options, and follow any security policies set by your workplace or school.