Microsoft Authenticator: what it does and how it compares
SHORT ANSWER
What does Microsoft Authenticator do?
Microsoft Authenticator is a free app for Android and iOS that protects Microsoft accounts with push approvals, passwordless phone sign-in and device-bound passkeys, and also makes verification codes you can use for other services. Its extra sign-in methods are built around Microsoft accounts and Microsoft Entra work accounts.
Key takeaways
- Beyond codes, it can approve a sign-in with a notification, sign you in without a password, and hold device-bound passkeys.
- Those extra methods are mainly for Microsoft personal, work and school accounts. For other sites it acts as a code generator.
- Microsoft retires old app versions for security, so keep it updated.
- Passkeys in it are device-bound, so they do not leave the phone, which is the same trade-off as other device-bound passkeys.
Disclosure: HostSpica makes HostSpica Identity, which competes with the apps named here. Facts about other products come from their own documentation, checked on 4 October 2026, and can change.
What it is
Microsoft Authenticator is a free app from Microsoft for Android and iOS. Microsoft's documentation lists several things it does for Microsoft Entra work or school accounts and Microsoft accounts: passwordless sign-in, passkeys, push notifications for multifactor authentication, and verification codes.
The four methods
| Method | How it works | Where it applies |
|---|---|---|
| Push approval (MFA) | After your password, a notification arrives on the phone. You approve or deny. | Microsoft accounts that you enabled it for |
| Passwordless phone sign-in | Instead of a password you see a number on the sign-in screen and pick it in the app. | Microsoft accounts that you enabled it for |
| Passkeys | A passkey kept in the app, unlocked with your biometric or device PIN. Microsoft says these are device-bound and made in secure hardware. | Microsoft sign-in with passkeys |
| Verification codes (OATH TOTP) | A six-digit code that changes every 30 seconds. | Any site that offers an authenticator app |
Microsoft Authenticator vs Google Authenticator vs HostSpica Identity
| Microsoft Authenticator | Google Authenticator | HostSpica Identity | |
|---|---|---|---|
| Codes for any site | Yes | Yes | Yes |
| Push approval and passwordless sign-in | Yes, for Microsoft accounts | No | No (AirAuth, in HostSpica Identity, approves sign-ins on sites that use it) |
| Passkeys | Yes, device-bound | No | Yes, passkeys on Android 14 or newer |
| Account tie-in | Microsoft account features | Optional Google Account sync | No account |
| Backup | Cloud backup in the app | Google sync or QR transfer | Encrypted file you keep |
| Moving codes out | Re-add each account from its site (check the app for any export) | Transfer codes, Export codes | Google-compatible QR export and encrypted backup |
Who it suits
- You use Microsoft or work accounts: its push approval, passwordless sign-in and passkeys are the reason to use it.
- You mostly need codes for other sites: any standard authenticator app does that. The Microsoft-specific features will go unused.
- You want your codes independent of any vendor account: an app without an account, and with a backup you hold, avoids the tie-in.
Things to know
- Microsoft updates the app often and may stop older versions from signing in, so update it.
- Push notifications on Android rely on Google Play services, so they may not work where those are blocked. Microsoft's documentation notes this for China and says to use a verification code instead.
- A device-bound passkey is lost with the phone, so keep a second sign-in method. See passkeys from first principles.
Frequently asked questions
Is Microsoft Authenticator only for Microsoft accounts?
No. It can make verification codes for other sites too, but push approval and passwordless sign-in are for Microsoft accounts.
Is Microsoft Authenticator free?
Yes, it is a free app for Android and iOS.
Does Microsoft Authenticator support passkeys?
Yes. Microsoft's documentation says passkeys in the app are device-bound.
Can I use Microsoft Authenticator and Google Authenticator together?
Yes. They are separate apps with separate accounts. Many people use one for Microsoft sign-ins and one for everything else.
References
Review status
Last technical self-review by the author on 4 October 2026. No independent reviewer yet. If you spot an error, write to [email protected] and we will correct it and note the change.
Rohan builds HostSpica's Android apps — Authenticator, Passkey and Identity — and writes up how they work, including the mistakes along the way.
ABOUT THE PRODUCTS
RELATED