

The Microsoft Authenticator supports a variety of authentication mechanisms to support Microsoft consumer, work and school accounts in different modes, as well as any account which supports the OATH TOTP standard.įor accounts using the OATH TOTP standard, there is a shared secret stored both in the Authenticator app and in the identity provider.įor accounts using other mechanisms, the Authenticator creates a public/private keypair in a hardware backed storage (e.g. Overview of how the Microsoft Authenticator works



In the descriptions below, a “strong authentication token” means the user has authenticated using multi factor authentication - for example, they used a password and then entered a code sent to their phone or email or signed in with Windows Hello or a FIDO token, depending on the factors they have previously enabled. Some folks have asked how we secure this process – in this blog, we’ll deep dive into how it works. If you add successfully, all information from the old phone will be synchronized to the new phone.Hello! With the dust settling from Ignite 2019, let’s dive in with “how stuff works” – focusing on the Microsoft Authenticator’s backup and restore feature.Įarlier this year we released the Microsoft Authenticator backup and restore feature on iOS and Android, which lets you easily move your accounts on the Authenticator app to a new device. Tap it and enter the email address you used on your old phone. Once done, you need to open the Microsoft Authenticator app on your new mobile device, and you'll see an option called BEGIN RECOVERY. You can use your personal email address as your recovery account. Now, you need to add an account for recovery. Next you turn on the option Cloud backup (Android phone) or iCloud backup (iOS phone). How to transfer the Microsoft Authenticator app to a new phoneįirst you need to enable the Microsoft Authenticator cloud backup feature by starting the app on your old phone, clicking on the 3-dot icon and selecting Settings. Note that in order to transfer all data from the old phone, the Cloud Backup feature needs to be enabled. If you have a new phone and want to bring all of your app data to your new phone, follow the instructions below. The app helps with two-factor authentication on different websites. Microsoft Authenticator is the familiar login verification code generator on Android and iOS.
