How to Set Up Microsoft Authenticator for Two-Factor Login

Microsoft Authenticator is a free app from Microsoft that works as an authentication tool for two-factor verification. When you sign in to an account, instead of only entering your password, you also verify your identity through the app — either by approving a notification or entering a 6-digit code that refreshes every 30 seconds.

Two-factor authentication using an authenticator app is more secure than text message codes, because it does not rely on your phone number — which can be hijacked by scammers. The Authenticator app generates codes locally on your device, without any network connection needed.

Microsoft Authenticator works with Microsoft accounts (Outlook, Xbox, Office 365) and also with Google, Amazon, Facebook, Twitter, banks, and hundreds of other services. It is not limited to Microsoft products.

For Microsoft accounts specifically, the app offers "passwordless sign-in" — you approve a sign-in notification with a tap rather than typing a password. This is both more secure and more convenient than passwords.

Setting up the app takes about 10 minutes per account. You scan a QR code shown on the website during two-factor setup, and the app is automatically linked to that account. After that, every time you log in from a new device, you approve it in the app.

The app is free, available on iPhone and Android, and stores your accounts securely using encryption. If you get a new phone, the app can transfer your accounts using a backup code or cloud backup.