Secure my account – authentication methods

1. On your phone, visit the App Store (iPhone) or Play Store (Android) to download and install the Microsoft Authenticator app. Ensure that you allow it to use your camera and send notifications when it prompts you.
2. On your computer, go to https://mysignins.microsoft.com/security-info
3. Click Add method.
4. On the Add a method window, ensure Authenticator app is selected from the list, and click Add.
5. On the Start by getting the app window, click Next.
6. On the Set up your account window, click Next.
7. On your phone, open the Authenticator app. If you’re asked for an unlock code, that’s your phone’s PIN (it may alternatively require your fingerprint or retina scan if you’ve set up either of those methods on your phone).
8. Click the menu button (three dots) and then Add account.
9. Click Work or school account.
10. Click Scan a QR code. If the app asks for permission to use your camera, click Allow.
11. The app should then open a QR code scanner. Point your camera at the QR code on your computer screen.
12. Click Next on the computer.
13. Click Enable phone sign-in or Approve on your phone. You may also need to unlock the app using your phone’s PIN, your fingerprint or retina scan.
14. Click Next on your computer.
15. Click Set default sign-in method, or Change if there’s already one set.
16. Select Microsoft Authenticator – passkeys from the list, and click Confirm.

In case you are unable to access your mobile phone for some reason (e.g. your phone has run out of battery or you have lost your phone), make sure you set up a secondary method. Learn how to set up a secondary method from these FAQs. 

The Microsoft help web pages also offer in-depth instructions on how to use Microsoft Authenticator with Microsoft

NB: In order to use passkeys on the Microsoft Authenticator App, your device will need to be running at least Android 14 or iOS 17.  You will also need to have the latest version of the Authenticator app installed.

Setting up Microsoft Authenticator with a Passkey

1. On your device, go to your MySign-Ins Microsoft account page.
2. Click + Add sign-in method.

 

 

 

 

 

 

3. Select Passkey in Microsoft Authenticator.

 

 

 

 

 

 

 

 

 

 

4. On your phone, open the Authenticator app. If you’re asked for an unlock code, that’s either your phone's PIN, your fingerprint or face ID, depending on how you normally unlock your phone.

5. Select your account.

6. Select Create a Passkey.

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

7. You will be prompted to confirm your identity with either your fingerprint, PIN or Face ID.

8. Select done.

Authenticating with a passkey

If this is your first time using a passkey to authenticate, your account will default to your existing authentication method e.g. Authenticator App with Number Matching. If this happens, please follow the instructions below.

If you have done it before, please simply select continue/approve to complete the authentication request.

When you log in, you will be prompted to do so using your passkey. Select continue/approve.

1. Select other ways to sign in.
2. Select Face, fingerprint, PIN or security key or Use another device.
3. Select iPhone, iPad or Android Device and click Next.
4. You will be presented with a QR code.
5. Open the Authenticator App and click on the QR code icon.

 

 

 

 

 

 

 

6. Scan the QR code.

7. Select Continue twice.

Sometimes a digital passkey isn't secure enough! For example, some staff that are Admins accessing high risk systems or for those using shared or public devices will require a physical hardware key, also known as a Fido2 device.

NB: You will need to already have this physical security key in order to set this up. Please complete this form if you require a Fido2 security key.

Setting up the Authenticator app with a security key

1. On your device, go to your MySign-Ins Microsoft account page.
2. Click + Add sign-in method.

 

 

 

 

 

3. Select Security Key.

 

 

 

 

 

 

 

 

 

4. Select how you wish to setup the token via USB or NFC. Typically, either method works on a smartphone, but you would use USB on a computer.

5. Select next.

6. Select Security key and click Next.

 

 

 

 

 

 

 

 

 

 

 

 

7. Your browser will then ask permission to access your token – click Ok.

8. Your browser will then confirm that it will allow Microsoft to see the make and model of your security key, click Ok.

9. Touch your security key.

10. If you have a new device, you will be prompted to set up a pin on your key. If you already have a pin, please enter this now.

11. Touch your security key twice.

12. You will receive confirmation that your passkey has been saved.

13. You will then be prompted to name your key. Please choose a distinguishable name as should you lose your key, you will be able to easily remove it from your account.

14. Click done.

Authenticating with a security key 

If this is your first time using a security key to authenticate, your account will default to your existing authentication method e.g. Authenticator App with Number Matching. If this happens, please follow the instructions below.

If you have done it before, please simply select the pin when you set up your security key and touch it to complete the authentication request.

1. Select other ways to sign in.
2. Select Face, fingerprint, PIN or security key.

 

 

 

 

 

 

 

 

 

 

 

 

 

3. Select Security key and click Next.

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Once this is completed, you can authenticate with your security key as normal, by entering the pin associated with your key and touching it to complete the authentication request.

Setting up authenticate using number matching

1. On your phone, visit the App Store (iPhone) or Play Store (Android) to download and install the Microsoft Authenticator app. Ensure that you allow it to use your camera and send notifications when it prompts you.
2. On your device, go to your MySign-Ins Microsoft account page.
3. Click Add method.
4. On the Add a method window, ensure Authenticator app is selected from the list, and click Add.
5. On the Start by getting the app window, click Next.
6. On the Set up your account window, click Next.
7. On your phone, open the Authenticator app. If you’re asked for an unlock code, that’s your phone’s PIN (it may alternatively require your fingerprint or retina scan if you’ve set up either of those methods on your phone).
8. Click the menu button (three dots) and then Add account.
9. Click Work or school account.
10. Click Scan a QR code. If the app asks for permission to use your camera, click Allow.
11. The app should then open a QR code scanner. Point your camera at the QR code on your computer screen.
12. Click Next on the computer.
13. Click Enable phone sign-in or Approve on your phone. You may also need to unlock the app using your phone’s PIN, your fingerprint or retina scan.
14. Click Next on your computer.
15. Click Set default sign-in method, or Change if there’s already one set.
16. On your device, go to your MySign-Ins Microsoft account page.
17. Check Microsoft Authenticator is selected. If not, Click + Add sign-in method and select Microsoft Authenticator and click Add.

 

 

 

 

 

 

Authenticating using number matching

On your phone, open the Authenticator app. If you’re asked for an unlock code, that’s either your phone's PIN, your fingerprint or face ID, depending on how you normally unlock your phone.

A number will display where you are trying to access services behind a login screen. You will need to enter that number on your app as shown in the pictures below.