How to set up and use a passwordless sign-in with Microsoft Authenticator for Microsoft 365

Summary

This guide helps you troubleshoot and resolve: How to set up and use a passwordless sign-in with Microsoft Authenticator for Microsoft 365. Follow the steps below to fix the issue.

Common Causes

Passwordless sign-in lets you approve a sign-in request on your phone instead of typing a password. This reduces the risk of phishing, credential theft, and password fatigue. Once enabled, you can sign in to Microsoft 365 services using the Microsoft Authenticator app with your fingerprint, face ID, or device PIN.

Quick Fix Steps

1. Install and open the Microsoft Authenticator app on your phone.
2. Sign in to your Microsoft 365 account at https://myaccount.microsoft.com on your computer.
3. Go to Security info and add Authenticator app as a sign-in method.
4. Follow the prompts to register your device and enable Passwordless.
5. Test the sign-in by signing out and back in using the app approval.

Detailed Instructions

Step 1: Prepare your phone

1. Install the Microsoft Authenticator app from the Apple App Store or Google Play Store.
2. Open the app and sign in with your Microsoft 365 work or school account.
3. Allow notifications when prompted. Passwordless sign-in relies on push notifications.

Step 2: Add the Authenticator app as a sign-in method

1. On your computer, open a web browser and go to https://myaccount.microsoft.com.
2. Sign in with your current Microsoft 365 password.
3. Select Security info from the left-hand menu.
4. Click Add sign-in method.
5. Choose Authenticator app from the dropdown list, then click Add.
6. Follow the on-screen prompts to scan the QR code with the Authenticator app on your phone.
7. After scanning, the app will show your account. Tap Next on the computer to verify the setup.

Step 3: Enable passwordless sign-in

1. Still on the Security info page, locate the Authenticator app entry you just added.
2. Click Change next to the entry.
3. Look for the Passwordless option and click Enable.
4. A confirmation prompt will appear. Click Enable again to confirm.
5. Approve the notification on your phone when it arrives.

Step 4: Test passwordless sign-in

1. Sign out of your Microsoft 365 account on your computer.
2. Go to https://portal.office.com or https://outlook.office.com.
3. Enter your email address and click Next.
4. Instead of a password field, you should see a prompt to Approve a request on my Microsoft Authenticator app.
5. Open the Authenticator app on your phone and approve the sign-in request.
6. Use your fingerprint, face ID, or device PIN to confirm.
7. You are now signed in without a password.

Step 5: Remove your password (optional)

Once you are confident that passwordless sign-in works reliably, you can remove your password entirely for a fully passwordless experience.

1. Go to https://myaccount.microsoft.com and sign in using passwordless.
2. Select Security info.
3. Locate your Password entry and click Delete.
4. Confirm the removal when prompted.

Troubleshooting

I don't see the Passwordless option

• Ensure your organisation has enabled passwordless sign-in for Microsoft 365. Contact your administrator if you are unsure.
• Make sure you are using the latest version of the Microsoft Authenticator app.
• Check that your account is not a consumer Microsoft account. Passwordless sign-in with Authenticator is only available for work or school accounts.

I'm not receiving push notifications

• Open the Authenticator app and pull down to refresh. The request may be waiting there.
• Check your phone's notification settings and ensure notifications are enabled for Microsoft Authenticator.
• Ensure your phone has an active internet connection (Wi-Fi or mobile data).
• On your computer, click I can't use my Microsoft Authenticator app right now and choose another sign-in method, then retry later.

The QR code won't scan

• Increase your screen brightness and zoom in on the QR code.
• Clean your phone camera lens.
• Tap Can't scan the QR code? on the computer screen to get a manual code you can type into the app.

I lost my phone or got a new phone

If you still have access to your account via another device, sign in at https://myaccount.microsoft.com and update your Security info to register your new phone. If you cannot sign in at all, you will need to use your organisation's account recovery process. For assistance, Open a Ticket with our support team.

Passwordless sign-in works on my computer but not on my phone

• Ensure the Microsoft Authenticator app is installed and signed in on the phone you are trying to sign in on.
• Update the app to the latest version.
• Clear the browser cache on your phone and try again.

Related Articles

• Password reset (Windows login)

Still Having Issues?