Microsoft Authenticator

Question

How does Microsoft Authenticator work on a desktop PC?

Answer 1

Microsoft Authenticator does not run as a Windows or macOS desktop app; you use it on an iOS or Android phone to verify sign-ins initiated on the desktop PC.^1^

How a desktop sign-in works

After Authenticator has been linked to your account:

1. On the PC, open the website or application and enter your username.
2. Select Send notification. If necessary, select Other ways to sign in → Approve a request on my Microsoft Authenticator app.
3. The PC may display a number.
4. Open the notification or Authenticator app on your phone.
5. Enter or select the number displayed on the PC, unlock the app with your phone’s PIN or biometric verification, and select Approve.
6. The sign-in on the PC completes.^2^

Depending on the account configuration, Authenticator can provide:

• Push approval: Approve a notification on the phone. Both devices need Internet connectivity.
• One-time verification code: Enter the code displayed by Authenticator into the PC. Generating these codes does not require Internet or mobile service.
• Passwordless sign-in: Enter your account name on the PC and approve the numbered request on the phone instead of supplying a password.^1^

Initial setup from the PC

For a work or school account:

1. Install Microsoft Authenticator on the phone.
2. On the PC, open your account’s Security info page.
3. Select Add sign-in method → Microsoft Authenticator → Add.
4. Continue until the PC displays a QR code.
5. On the phone, open Authenticator and select + → Work or school account → Scan a QR code.
6. Scan the code displayed on the PC and complete the test approval.

For a personal Microsoft account, open the account’s Security page on the PC, select Manage how I sign in → Add a new way to sign in or verify → Use an app, and scan the displayed QR code from Authenticator. The app supports personal, work or school, and compatible non-Microsoft accounts.^3^

The QR code used during setup links the account to the phone; it does not install Authenticator on the PC. Keeping the authentication factor on a separate device reduces the chance that someone who compromises the PC can also obtain its second factor.^1^

---

References

1. Microsoft Authenticator FAQs | Microsoft Support
2. Sign in using Microsoft Authenticator | Microsoft Support
3. How to add your accounts to Microsoft Authenticator