Microsoft Security | Microsoft Authenticator
A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
To use Microsoft Authenticator with PayPal and other apps, the app must first be added as an account inside Microsoft Authenticator. Until that is done, no codes will appear.
There are two common patterns:
- Apps that explicitly support “Microsoft Authenticator” (push notifications)
- Apps that support any “authenticator app” via a QR code or secret key (TOTP one-time codes)
For most third‑party services like PayPal, the second pattern (TOTP) is used.
General setup steps for Microsoft Authenticator with an app like PayPal:
- Install and update Microsoft Authenticator
- Install the latest Microsoft Authenticator app from the App Store or Google Play and ensure it is updated.
- The app can hold multiple accounts, including non‑Microsoft accounts such as Amazon, Facebook, Instagram and Google.
- Start two‑step verification setup in the target app (for example, PayPal)
- In the app’s security or login settings, look for options like:
- “Two‑step verification,” “Two‑factor authentication (2FA),” or “Security keys and codes.”
- Choose the option that says “Authenticator app,” “Use an app,” or “Time‑based one‑time password (TOTP).”
- The app will then show a QR code or a secret key.
- In the app’s security or login settings, look for options like:
- Add the account to Microsoft Authenticator
- Open Microsoft Authenticator on the phone.
- Tap the + icon to add a new account.
- Choose the appropriate type (for non‑Microsoft services, usually a generic option such as a non‑Microsoft account/other account is used; the app supports non‑Microsoft accounts like Amazon, Facebook, Instagram, and Google in this way).
- Select Scan a QR Code and point the camera at the QR code shown by the app’s security page.
- If scanning is not possible, use the app’s “enter code manually” option and the corresponding option in Authenticator to type the secret key.
- After scanning or entering the key, the account appears in Microsoft Authenticator with a six‑digit one‑time password code that changes every 30 seconds.
- Confirm setup in the target app
- The app (for example, PayPal) will usually ask to enter the current six‑digit code from Microsoft Authenticator to confirm setup.
- Enter the code shown under that account in Microsoft Authenticator and complete the setup.
- Use Microsoft Authenticator codes when signing in
- When signing in to that app in the future and it asks for a verification code from an authenticator app, open Microsoft Authenticator, find the corresponding account, and enter the six‑digit code displayed.
If an app offers “Microsoft Authenticator, email, or text message” but no code appears in Microsoft Authenticator, it typically means the app’s two‑step verification was never completed using the “Use an app/authenticator app” option and QR code/secret key. The app must be explicitly added to Microsoft Authenticator as described above before codes will appear.
For Microsoft personal or work/school accounts, Microsoft Authenticator can also be added directly as a sign‑in method and used for notifications or verification codes:
- For a personal Microsoft account:
- Go to the Security tab at https://account.microsoft.com/security.
- Select Manage how I sign in.
- Select Add a new way to sign in or verify and choose Use an app.
- Follow the prompts to scan the QR code with Microsoft Authenticator (Personal account → Scan a QR Code).
- For Microsoft 365 work/school accounts, use the Microsoft 365 portal setup flow to add Mobile app and scan the QR code from Microsoft Authenticator.
Once each service (PayPal or others) has been added via its own security settings and QR code/secret key, Microsoft Authenticator will generate the codes needed, and they will appear under the corresponding account entry in the app.
References: