Microsoft Authenticator
Free two-step sign-in codes and push approvals for Microsoft and other online accounts
by Microsoft Corporation · listed Oct 19, 2026
Quick verdict
A dependable, free authenticator that is close to essential if you use Microsoft accounts at work or school, and perfectly capable for everything else. Just make sure backup is switched on before you need it.
Best for People who need two-step verification for Microsoft work or school accounts and want one free app for all their other codes too
Reviewed by AppsPicks on Oct 19, 2026. How we review
Microsoft Authenticator review
Microsoft Authenticator adds a second check when you sign in. It generates rotating six-digit codes for any service that supports standard authenticator apps, such as Google, GitHub, Amazon or Dropbox. For Microsoft personal, work and school accounts, it can also send a prompt to your phone for you to approve. It suits anyone whose employer or school uses Microsoft 365, plus people who want one free app for all their codes.
Most days it is quiet. A login asks for approval, you confirm with your face, fingerprint or PIN, and you are done. For other sites, you open the app and type the current code before the 30-second timer runs out. Codes work offline. With a Microsoft account you can turn on backup, so moving to a new phone does not mean setting up every account again.
Why we picked it: It is free, has no ads, works with almost any service that offers app-based codes, and is often required at work anyway, so it makes sense to keep everything in one place.
Watch out for: Cloud backup needs a Microsoft account. Password storage and autofill have been moved out of the app and into Edge, so do not rely on it as a password manager.
What we like
- Completely free with no ads or in-app purchases
- Push approvals for Microsoft accounts save typing codes
- Works with any service that supports standard time-based codes
- Codes generate offline without draining the battery
- Biometric or PIN lock adds protection on the device itself
What could be better
- Cloud backup and restore depend on having a Microsoft account
- Password autofill is no longer part of the app
- Some features only apply to Microsoft accounts, not third-party ones
- Backups cannot easily be exported to other authenticator apps
Questions about Microsoft Authenticator
Is Microsoft Authenticator free?
Yes. It is free on both iPhone and Android, with no ads and no in-app purchases.
Does it work with non-Microsoft accounts?
Yes. You can add any service that supports authenticator app codes, including Google, Facebook, Amazon, GitHub and LinkedIn. Push approvals are limited to Microsoft accounts.
Do I need an internet connection to get codes?
No. The six-digit codes are generated on your phone and work offline. Push approvals do need a connection.
What happens if I lose or replace my phone?
If you turned on backup with a Microsoft account, you can restore your accounts on the new device. Without a backup, you will need each service's recovery options to set things up again.
What are the alternatives?
Google Authenticator, Authy and the code features built into password managers such as 1Password or Bitwarden cover similar ground. Microsoft Authenticator is the natural choice if your workplace uses Microsoft 365.
From the developer: how Microsoft Authenticator describes itself
Use Microsoft Authenticator for easy, secure sign-ins for all your online accounts using multi-factor authentication, passwordless, or password autofill. You also have additional account management options for your Microsoft personal, work or school accounts.
Getting started with multi-factor authentication
Multi factor authentication (MFA)provides a second layer of security. When enabled, during login after entering your password, you’ll be asked for an additional way to prove it’s really you. Either approve the notification sent to the Microsoft Authenticator, or enter the one-time password (OTP) generated by the app. The OTP codes have a 30 second timer counting down. This timer is so you never have to use the same time-based one-time password (TOTP) twice and you don’t have to remember the number. The OTP doesn’t require you to be connected to a network, and it won’t drain your battery. You can add multiple accounts to your app, including non-Microsoft accounts like Facebook, Amazon, Dropbox, Google, LinkedIn, GitHub, and more.
Getting started with passwordless
Use your phone, not your password, to log into your Microsoft account. Just enter your username, then approve the notification sent to your phone. Your fingerprint, face ID, or PIN will provide a second layer of security in this two-step verification process. After you’ve signed in with two factor authentication (2FA), you’ll have access to all your Microsoft products and services, such as Outlook, OneDrive, Office, and more.
Microsoft personal, work or school accounts
Sometimes your work or school might ask you to install the Microsoft Authenticator when accessing certain organization resources. You will need to register your device to your organization through the app and add your work or school account. Microsoft Authenticator supports cert-based authentication by issuing a certificate on your device. This will let your organization know that the sign-in request is coming from a trusted device and help you seamlessly and securely access additional Microsoft apps and services without needing to log into each.
Microsoft Authenticator may request the following optional permissions, which require your consent. You can continue to use Microsoft Authenticator without granting these permissions. However, some features may be limited or unavailable. For more information, please see below:
- Face ID: To enable app lock and help protect your accounts - Camera: To scan QR codes when adding accounts to Microsoft Authenticator.
Text from the app store listing, quoted for reference. Our own take is above.
Reviews (0)
Be the first to review.