Using my Microsoft authenticator

The QR code can sign you in only if a passkey for that work or school account has already been created on your phone; simply adding the account to Microsoft Authenticator is not enough.

1. Check for and create the passkey

1. Open Microsoft Authenticator on the phone.
2. Select the work or school account you are using for the project.
3. Look for Passkey in the account details.
4. If it is absent, tap Create a passkey and complete multifactor authentication.
5. Follow the prompts to:
   • Enable a phone screen lock using a PIN, fingerprint, or face recognition.
   • Enable Authenticator as a passkey provider.
6. Confirm that Passkey now appears for the account. Microsoft documents this as the recommended Authenticator registration method.^1^

Then refresh the sign-in page on the computer, choose Sign in with a passkey from another device, and scan the new QR code. Authenticator’s camera can be used for WebAuthn passkey QR codes.^2^

2. Check the cross-device requirements

Before scanning again:

• Turn on Bluetooth on both the computer and phone.
• Keep the phone close to the computer.
• Connect both devices to the internet; they do not need to use the same Wi-Fi network.
• Ensure the phone has a screen lock enabled.

These are required for cross-device passkey authentication. A missing screen lock can produce “No passkeys available.”^3^

If “Create a passkey” is unavailable

The client organization may not have enabled Microsoft Authenticator passkeys for your account, or it may prohibit the Bluetooth-based cross-device flow. In that case:

1. On the computer, select Sign in another way.
2. Use another method already registered for the account, if offered.
3. Ask the client’s IT administrator to confirm that:
   • Passkeys in Microsoft Authenticator are enabled for your account.
   • Cross-device passkey authentication is permitted.
   • Your account is registered with the correct authentication method.

If this is Android with separate Personal and Work profiles, Authenticator and the passkey must be in the profile used for the work account; credentials cannot be shared between those isolated profiles.^2^

Do not delete any existing sign-in method until the new passkey has been created and tested successfully.

References

1. Register passkeys in Authenticator on Android and iOS devices
2. Frequently asked questions about passkeys
3. Troubleshoot signing in with a passkey | Microsoft Support