Microsoft Authenticator - Set Up and Use

What Is Microsoft Authenticator?

Microsoft Authenticator is the recommended verification method for your SIUE account. Instead of receiving a text message or phone call, you approve a notification in the app on your phone. It works on any device with the app installed, does not require Bluetooth, and many users already have it installed.

Microsoft is retiring SMS and voice call verification for Microsoft 365 accounts. Microsoft Authenticator is the recommended replacement because it keeps working on any device. See E-ID - Changing your E-ID password for what the retirement means for self-service password reset.

The app can be used two ways: as a second verification step after you enter your password, or as a passkey that lets you sign in without a password. Both are covered below. If you prefer a passkey on another device instead of the app, see Passkeys to compare your options.

Install the App

• iPhone: Open the App Store, search for Microsoft Authenticator, and select Get.
• Android: Open the Google Play Store, search for Microsoft Authenticator, and select Install.

Add Your SIUE Account

1. On your computer, open a web browser and go to https://aka.ms/mfasetup. Sign in with your SIUE email address and password.
2. Select Microsoft Authenticator as the method to add.
3. Select Next. A QR code appears on the screen.
4. On your phone, open Microsoft Authenticator.
5. Select the plus sign (+) or Add account, then select Work or school account.
6. Point the camera at the QR code on your computer screen.
7. The account is added to the app. The sign-in screen on your computer asks you to approve a notification in the app; approve it to finish.

If your phone asks for permission to show notifications from Microsoft Authenticator, allow it so sign-in approvals can reach you.

Approve a Sign-In Request

1. Enter your SIUE email address and password at the sign-in screen.
2. The sign-in screen shows a two-digit number.
3. On your phone, open the notification from Microsoft Authenticator. The app shows the same two-digit number with Approve and Deny.
4. Confirm the number in the app matches the number on your computer screen, then select Approve.

Your sign-in completes automatically after you approve the request in the app.

Use a Verification Code Instead

If you cannot receive or approve push notifications, such as when your phone has no internet connection, use the verification code generated by the app instead.

1. Open Microsoft Authenticator on your phone.
2. Select your SIUE account. A six-digit code is displayed and refreshes every 30 seconds.
3. At the sign-in screen, select Sign in another way, then select the option to use a verification code.
4. Enter the current six-digit code from the app and select Verify.

Optional: Sign In Without a Password (Passkey in Authenticator)

You can store a passkey in Microsoft Authenticator and sign in without entering your password. This requires a device that supports passkeys.

1. On your computer, open a web browser and go to https://mysignins.microsoft.com/security-info.
2. Sign in with your SIUE account.
3. Select Add sign-in method, choose Passkey, and select Add.
4. When prompted on your phone, choose Microsoft Authenticator as the save location.
5. Complete the biometric prompt (Face ID, Touch ID, or fingerprint) to save the passkey.

Passkey setup on other devices, such as a Windows PC, is covered in Setting Up and Signing In with a Passkey.

Set Up Authenticator on a New Phone

When you replace your phone, install the app and add your account again. If backup was enabled on your previous phone, your Authenticator accounts can be restored automatically.

1. Install Microsoft Authenticator on the new phone from the App Store or Google Play Store.
2. Open the app and sign in with the personal Microsoft account (or Google account on Android) that was used for backup on your old phone. This is not your SIUE account.
3. Select Recover if the app offers to restore your accounts from backup.
4. If backup was not enabled on your old phone, the account will not restore. In that case, add your SIUE account again using the steps in the "Add Your SIUE Account" section.
5. On a computer, go to https://mysignins.microsoft.com/security-info and remove the old phone from your registered methods so it no longer receives your sign-in notifications.

If you also use passkeys, see Managing Passkeys: New and Multiple Devices for removing the old device's passkey and registering the new one.

If You Cannot Receive Push Notifications

If the sign-in notification does not appear, try the following:

• Confirm your phone is connected to the internet (Wi-Fi or cellular).
• Check that notifications for Microsoft Authenticator are allowed in your phone's settings. On iPhone, check Settings > Notifications. On Android, check Settings > Apps > Microsoft Authenticator.
• Open the app once to confirm your account is still listed and the app is signed in.
• Use the verification code from the app instead of the push notification. See the "Use a Verification Code Instead" section.
• If the app no longer works, register the account again using the steps in the "Add Your SIUE Account" section.

Related Information

• Passkeys - compare authentication methods and choose what fits you.
• Setting Up and Signing In with a Passkey - passkey setup without the Authenticator app.
• E-ID - Changing your E-ID password - reset your password and use self-service password reset before SMS and voice verification retire.
• How to Register for Self-Service Password Reset - add alternate email, security questions, or Authenticator approval for password reset.

Need Additional Support?

This guide aims to provide useful information, but as technology changes, interfaces or steps might vary. Please use the Comment button to let us know if anything differs from your experience. Your feedback helps us keep this information accurate. Thank you!