This article shows how to use Microsoft Authenticator to register a passkey and use it for signing in to your Work or School Account. 

The easiest and fastest way to add a passkey is to add it directly in the Authenticator app. If you need to download Authenticator, see Download and install the Microsoft Authenticator app. Your mobile device needs to run iOS version 17, or Android version 14, or later to set up passkeys in Authenticator.

The following table outlines the available scenarios that you can use to create a passkey from your mobile device browser, or through cross-device registration using another device, such as a laptop.

I want to create a passkey:

In this article:

iOS

Android

With Authenticator on my mobile device

Same-device registration in Authenticator

Yes

Yes

In My Security Info and save the passkey to Authenticator on my mobile device

Same-device registration from a browser

Yes

Coming soon

In My Security Info and save the passkey to Authenticator on a different device, such as my laptop

Cross-device registration 

Yes

Yes

For information about signing in with a passkey, see Sign in with a passkey in Microsoft Authenticator. 

Same-device registration in Authenticator

For seamless single sign-on (SSO) across Microsoft native apps, sign in to Authenticator to create a passkey. You need to complete these steps even if you're signed in, or you already have an account in Authenticator.

  1. Open Authenticator > tap Add Account or the + button > select Work or school account > tap Sign in.

  2. You'll need to complete multifactor authentication (MFA).

  3. Select Open Settings to enable Authenticator as a passkey provider, open Passwords > Password Options.

  4. Turn on Autofill Passwords and Passkeys and in the Use Passwords and Passkeys From, select Authenticator.

  5. Authenticator confirms your account was added according to your work or school policies. Click Continue to complete the registration.

For seamless single sign-on (SSO) across Microsoft native apps, you can sign in to Authenticator to create a passkey. This is the recommended way to setup a passkey in Authenticator. You need to complete these steps even if you're signed in, or you already have an account in Authenticator.

  1. Open Authenticator > tap Add Account or the + button > select Work or school account > tap Sign in.

  2. You'll need to complete multifactor authentication (MFA).

  3. Follow the steps to add Authenticator as a passkey provider in Settings on your Android device:

       - On your Android device, open Settings.

       - Open Passwords & Accounts.

       - Under Additional providers, enable Authenticator.

  4. Return to Authenticator and select Done.

  5. Authenticator confirms your account was added according to your work or school policies.

Same-device registration from a browser 

You can also use your web browser to set up a passkey in Authenticator.

  1. Open your web browser and go to My Security info.

  2. Tap + Add sign-in method > choose Passkey in Microsoft Authenticator (preview) > Tap Add.

  3. You'll need to complete multifactor authentication (MFA).

  4. Select Open Settings to enable Authenticator as a passkey provider, open Passwords > Password Options.

  5. Turn on Autofill Passwords and Passkeys and in the Use Passwords and Passkeys From, check the Authenticator option.

  6. Read the reminder that you must save the passkey in Authenticator, and tap I understand to continue.

  7. In the security window that opens, save the passkey to Authenticator, and follow the prompts on your device.

  8. After you return to My Security info, choose a friendly name for the passkey, and tap Done.

  9. The passkey appears in Authenticator with your other registered security info options.

Note: This feature is coming soon.

Cross-device registration

You can also save a passkey in Authenticator from your computer or another mobile device. This registration option requires Bluetooth and an internet connection for both devices.

  1. Using another device, such as a laptop, open a web browser and sign in to My Security info.

  2. Tap + Add sign-in method > choose Passkey in Microsoft Authenticator (preview) > Add.

  3. Sign in with multifactor authentication (MFA), then tap Next.

  4. If necessary, download Microsoft Authenticator, then tap Next.

  5. Tap iOS.

  6. Select Open Settings to enable Authenticator as a passkey provider, open Passwords > Password Options.

  7. Turn on Autofill Passwords and Passkeys and in the Use Passwords and Passkeys From, check the Authenticator option.

  8. Open the camera app on your mobile device. 

    Note: The camera inside the iOS Authenticator app doesn't support scanning a QR code. You need to use the system camera app.

  9. When ready, read the reminder on My Security info that you must save the passkey in Authenticator, and tap Next to continue.

  10. Tap iPhone, iPad, or Android device, then tap Next.    

    Note: The displayed options can vary on different browsers and devices. If the device where you started the registration process supports passkeys, you're asked to save the passkey to that device. Select Use another device or More options to see other ways you can save the passkey.

  11. Use the system camera app to scan the QR code, then tap Save a passkey.

  12. Your iOS device should now connect over Bluetooth to the device you started registration with. For this step, Bluetooth and internet connection are required for both devices.

  13. Your iOS device opens a security window. Follow the prompts to save the passkey to Authenticator.

  14. Once the passkey is successfully created on your device, you're directed back to My Security info, tap Done.

  15. Name the passkey something memorable to you and tap Done.

You can also save a passkey in Authenticator from your computer or another mobile device. This registration option requires Bluetooth and an internet connection for both devices.

  1. Open your web browser and go to My Security info.

  2. Tap + Add sign-in method > choose Passkey in Microsoft Authenticator (preview) > tap Add.

  3. You'll need to complete multifactor authentication (MFA), then tap Next.

  4. If necessary, download Microsoft Authenticator, then tap Next.

  5. Tap Android.

  6. Follow the steps to add Authenticator as a passkey provider in Settings on your Android device. 

       - On your Android device, open Settings.

       - Open Passwords & Accounts.

       - Under Additional providers, enable Authenticator.

       - Return to My Security info and select Continue.  

    Note: The steps to turn on a passkey provider on Android can vary on different devices. Search for passkey on your device settings or check your device help.

  7. Open the system camera app on your mobile device or tap Add work or school account > Scan QR Code to use the camera in the Authenticator.  

  8. When ready, read the reminder that you must save the passkey in Authenticator, and tap Next to continue.

  9. In the security dialog that opens on your device, tap iPhone, iPad, or Android device, and tap Next.    

    Note: The displayed options can vary on different browsers and devices. If the device where you started the registration process supports passkeys, you're asked to save the passkey to that device. Select Use another device or More options to see other ways you can save the passkey.

  10. Use the camera you have opened to scan the QR code, and then tap Use passkey.

    Note: For quicker sign-in, Android allows you to remember some browsers and Windows devices after scanning the WebAuthn QR code. In such cases, instead of having to scan a QR code each time, the device will appear as a selectable option, and you'll receive a notification on your mobile device to continue the passkey authentication.

  11. Your Android device should now connect over Bluetooth to the device you started registration with.

  12. Your device opens a security window. Save the passkey to Authenticator following the prompts on your device.

  13. Once the passkey is successfully created on your device, you're directed back to My Security info.

  14. Name the passkey something memorable to you and select Done.

Delete a passkey

To remove the passkey from Authenticator, click the Trash icon, then tap Delete to confirm. You also need to delete the passkey from My Security info.

Error when a passkey already exists   

In some cases when you try to register a passkey, it gets stored locally in the Authenticator app but not registered on the authentication server. For example, the passkey provider might not be permitted, or the connection might time out.

If you try to register a passkey and see an error that the passkey already exists, delete the passkey that was created locally in Authenticator, and retry registration.

Related topic

Set up a passkey (FIDO2) on a mobile device as your verification method

Facebook LinkedIn Email

Need more help?

Want more options?

Explore subscription benefits, browse training courses, learn how to secure your device, and more.

Microsoft 365 subscription benefits

Microsoft 365 training

Microsoft security

Accessibility center