
authenticator app · Microsoft
Microsoft Authenticator
Free phone app for Microsoft sign-in approvals and one-time codes for other accounts.
In short
- The iOS app is listed as free on the App Store8.
- It runs on iOS and Android only; Microsoft says it is not available for PC or Mac1.
- Backup goes to iCloud on iOS and to a Microsoft personal account on Android; backups cannot move between iOS and Android2.
- From January 2027, Microsoft says Android backup no longer uses a Microsoft personal account and needs Google One backup2.
- Microsoft's Identity Bounty lists the iOS and Android app, with awards from $750 to $100,0007.
Microsoft Authenticator suits people whose main accounts are Microsoft ones, since it adds approval prompts and codes for other sites on iOS and Android1,2,4,8. It has an app lock and a public bounty3,7. The catch: Microsoft does not document a user-held backup key, and the app is mobile only1,2.
Best for: People who mainly protect Microsoft accounts and want sign-in approval prompts.
Where the points come from
Security and trust 9 of 37 points
| Rule | What is published | Points |
|---|---|---|
| End-to-end encrypted backup | Not publishedNot published on the vendor's backup page2: it names iCloud or a Microsoft account but not a user-held key. | 0 / 12 |
| Independent audit, 2023 or later | Not publishedNot published on the vendor's pages2. | 0 / 10 |
| Open-source apps | Not publishedNot published on the vendor's pages1. | 0 / 6 |
| Public bug bounty | YesThe Microsoft Identity Bounty scope lists Microsoft Authenticator for iOS and Android; awards run $750 to $100,0007. | 3 / 3 |
| App lock | YesApp Lock asks for the device PIN or biometrics each time you open Authenticator3. | 6 / 6 |
Backup and recovery 10 of 35 points
| Rule | What is published | Points |
|---|---|---|
| Cloud backup or sync | YesiOS backs up to iCloud; Android backs up to a Microsoft personal account. One-time codes for third-party accounts return2. | 10 / 10 |
| Same codes on several devices | Not publishedNot published on the vendor's FAQ3: it says only that adding the app to a new device does not remove it from the old one. | 0 / 7 |
| Export all accounts | Not publishedNot published: the export page covers passwords only and does not describe exporting accounts or codes6. | 0 / 7 |
| Import from other apps | Not publishedNot published on the vendor's import page5: it covers saved passwords from browsers and managers, not codes. | 0 / 6 |
| Works without an account | Not publishedNot published on the vendor's add-accounts page9. | 0 / 5 |
Systems 4 of 12 points
| Rule | What is published | Points |
|---|---|---|
| Apps | iOS, AndroidDownload page lists the Apple App Store and Google Play; not available for PC or Mac1. | 4 / 12 |
Features 3 of 12 points
| Rule | What is published | Points |
|---|---|---|
| Stores passkeys | Not publishedNot published on the vendor's sign-in page4 or FAQ3. | 0 / 3 |
| Sign-in approval prompts | YesSelect Send notification at sign-in and approve in the app; you may also be shown a number to match4. | 3 / 3 |
| Counter-based (HOTP) codes | Not publishedNot published on the vendor's FAQ3: it describes codes that change every 30 seconds. | 0 / 3 |
| Folders, tags or search | Not publishedNot published on the vendor's FAQ3. | 0 / 3 |
Price 0 of 4 points
The rule behind each line: how we score authenticator apps.
Plans and prices
As the vendor lists them, before tax. Prices are in US dollars unless the plan shows euros; the points use US dollars, with euros converted at the ECB rate.
| Plan | Price as listed | Per month | Notes |
|---|---|---|---|
| Free (iOS)1 person | Free8 | $0 | Listed as free on the App Store |
Strengths
- Free on iOS, with codes for Microsoft and non-Microsoft accounts8,2.
- Sign-in approval by notification works, and Microsoft says you may be shown a number to match4.
- App Lock asks for the device PIN or biometrics when you open the app3.
- Third-party account codes are backed up and return after a restore2.
- The app is in scope of a public bounty programme7.
Limits
- Microsoft says the app is not available for PC or Mac1.
- Backups restore only on the same device type, so iOS and Android do not mix2.
- Microsoft's backup page does not say whether backups are encrypted with a key only you hold2.
- Microsoft's help pages for export and import cover passwords only, not authenticator codes5,6.
Other authenticator apps
- 1
Ente AuthPeople who want encrypted sync, open source and a web view of their codes91/100$0cost with backup on two devices - 2
Proton AuthenticatorPeople who want encrypted sync and a Windows or Linux app79/100$0cost with backup on two devices - 3
Zoho OneAuthPeople who want free encrypted backup and the same codes on a phone and a computer74/100$0cost with backup on two devices - 4
2FAS AuthiPhone and Android users who want a free app without an account73/100$0cost with backup on two devices
Sources
- Download Microsoft Authenticator, Microsoft Support. Accessed 8 Oct 2026.
- Back up your accounts in Microsoft Authenticator, Microsoft Support. Accessed 8 Oct 2026.
- Microsoft Authenticator FAQs, Microsoft Support. Accessed 8 Oct 2026.
- Sign in using Microsoft Authenticator, Microsoft Support. Accessed 8 Oct 2026.
- Import passwords into the Microsoft Authenticator app, Microsoft Support. Accessed 8 Oct 2026.
- Export passwords from Microsoft Authenticator, Microsoft Support. Accessed 8 Oct 2026.
- Microsoft Identity Bounty Program, Microsoft Security Response Center. Accessed 8 Oct 2026.
- Microsoft Authenticator on the App Store, Apple App Store. Accessed 8 Oct 2026.
- How to add your accounts to Microsoft Authenticator, Microsoft Support. Accessed 8 Oct 2026.
Website: www.microsoft.com/en-us/security/mobile-authenticator-app · Markdown version · We are not affiliated with Microsoft.