Daily.Entra.News
Aboutmerill.net
Microsoft Entra ID

Register passkeys in Authenticator on Android and iOS devices

7 July 2026Updated+121 / −71 lines

In brief

Learn how to register passkeys in Microsoft Authenticator on Android and iOS. Sign in to the app, use Security info, or register cross-device.

What Entra admins need to know

Review the documentation change to determine whether it affects tenant configuration, security posture, or rollout plans.

This editorial summary was generated by AI from the documentation changes. Verify important details in the full Microsoft Learn article.

Documentation change

Open on Microsoft Learn ↗

The comparison below is an extract of the Microsoft Learn article showing only the changed content. Open the full article for complete context.

Register passkeys in Authenticator on Android orand iOS devices

This article shows how to register a passkey by usingin Microsoft Authenticator on your iOS or Android devicedevice.

iOS

You can register by directly signing in to the Authenticator app ordirectly, by using Security info. For more information about the availability of Microsoft Entra ID passkey (FIDO2) authentication across native apps, web browsers, and operating systems, see Support for FIDO2 authentication with Microsoft Entra ID.

The easiest and fastest way to add a passkey is to add it directly in the Authenticator app.

Alternatively, you can add a passkey, or from your mobile device browser or through cross-device registration by using another device, such as a laptop. Your mobile device needs to run iOS version 17 or Android version 14, or later.

ScenarioiOSAndroid
Same-device registration by signing into Authenticator✅✅
Same-device registration in a browser✅✅1
Cross-device registration✅✅

1Support for same-device registration in Microsoft Edge on Android is coming soon.

iOS

Registration by signing in toUse Authenticator (iOS)

You can sign in to Authenticator to create a passkey in the app and get seamless single sign-on across Microsoft native apps. We recommend this preferredThis flow is the recommended way to set up a passkey in Authenticator. If you're signed in or already have an account in Authenticator, you still need to complete these steps to add a passkey in Authenticator.

  1. Download Authenticator from the App Store, and go through the privacy screens.

    • Add your account in Authenticator on your iOS device:

      :::row::: :::column span="3":::

      If you installed Authenticator for the first time on your device, on the Secure Your Digital Life screen, tap Add work or school account.

      :::column-end::: :::column span="1"::: :::image type="content" border="true" source="media/howto-register-passwordless-passkey-direct-ios/ios-first-run.png" alt-text="Screenshot that shows the first screen to appear for Authenticator for iOS devices." lightbox="media/howto-register-passwordless-passkey-direct-ios/ios-first-run.png" border="true"::: :::column-end::: :::row-end::: :::row::: :::column span="3":::

    • If you installed Authenticator on your device but you didn't add an account, tap Add account or the + button, and select Work or school account. Then tap Sign in.

      :::column-end::: :::column span="1"::: :::image type="content" border="true" source="media/howto-register-passwordless-passkey-direct-ios/add-account-ios.png" alt-text="Screenshot that shows how to register by using Authenticator for iOS devices." lightbox="media/howto-register-passwordless-passkey-direct-ios/add-account-ios.png" border="true"::: :::column-end::: :::row-end::: :::row::: :::column span="3":::

    • If you already added an account in Authenticator, tap your account, and then tap Create a passkey.

      :::column-end::: :::column span="1"::: :::image type="content" border="true" source="media/howto-register-passwordless-passkey-direct-ios/ios-create-passkey.png" alt-text="Screenshot that shows how to create a passkey in Authenticator for iOS devices.":::

  2. You need to complete multifactor authentication (MFA).

    :::image type="content" border="true" source= lightbox="media/howto-register-passwordless-passkey-direct-ios/multifactor-auth-ios.ios-create-passkey.png" alt-text=border="Screenshot that shows how to complete MFA by using Authenticator for iOS devices.true"::: :::column-end::: :::row-end:::

  3. Complete multifactor authentication (MFA).

  4. If necessary, tap Settings and set up a screen lock.

    :::image type="content" border="true" source="media/howto-register-passwordless-passkey-direct-android/android-account-added.png" alt-text="Screenshot that shows an account added to Authenticator for Android devices.":::

  5. Authenticator sets up passkey, passwordless, and MFA for sign-in according to your work or school account policies. Tap your account to see information, including your new passkey.

Passkey registration fromUse Security info (iOS)

By default, Security info prompts users to sign in to the Authenticator app to register their passkey.

  1. On the same iOS device as the Authenticator or by using another device, such as a laptop, open a web browser and sign in with MFA to Security info.

    :::image type="content" border="true" source="media/howto-authenticate-passwordless-passkey-ios/enter-temporary-access-pass-laptop.png" alt-text="Screenshot that shows how to enter a temporary access pass on a laptop at 80%.":::

  2. On Security info, tap + Add sign-in method and select Passkey in Microsoft Authenticator.

    :::image type="content" border="true" source="media/howto-authenticate-passwordless-passkey-ios/select-passkey-in-authenticator.png" alt-text="Screenshot that shows how to select passkey in Authenticator as a sign-in method.":::

  3. Add your account in Authenticator on your iOS device.

    • :::row::: :::column span="3":::

      If you installed Authenticator for the first time on your device, on the Secure Your Digital Life screen, tap Add work or school account.

      :::column-end::: :::column span="1"::: :::image type="content" border="true" source="media/howto-register-passwordless-passkey-direct-ios/ios-first-run.png" alt-text="Screenshot that shows the first screen to appear for Authenticator for iOS devices." lightbox="media/howto-register-passwordless-passkey-direct-ios/ios-first-run.png" border="true"::: :::column-end::: :::row-end::: :::row::: :::column span="3":::

    • If you installed Authenticator on your device before but didn't add an account, tap Add account or the + button, and select Work or school account. Then tap Sign in.

      :::column-end::: :::column span="1"::: :::image type="content" border="true" source="media/howto-register-passwordless-passkey-direct-ios/add-account-ios.png" alt-text="Screenshot that shows how to register by using Authenticator for iOS devices." lightbox="media/howto-register-passwordless-passkey-direct-ios/add-account-ios.png" border="true"::: :::column-end::: :::row-end::: :::row::: :::column span="3":::

    • If you already added an account in Authenticator, tap your account, and then tap Create a passkey.

      :::column-end::: :::column span="1"::: :::image type="content" border="true" source="media/howto-register-passwordless-passkey-direct-ios/ios-create-passkey.png" alt-text="Screenshot that shows how to create a passkey in Authenticator for iOS devices.":::

  4. You need to complete multifactor authentication (MFA).

    :::image type="content" border="true" source= lightbox="media/howto-register-passwordless-passkey-direct-ios/multifactor-auth-ios.ios-create-passkey.png" alt-text=border="Screenshot that shows how to complete MFA by using Authenticator for iOS devices.true"::: :::column-end::: :::row-end:::

  5. Complete multifactor authentication (MFA).

  6. If necessary, tap Settings and set up a screen lock.

    :::image type="content" border="true" source="media/howto-register-passwordless-passkey-direct-android/android-account-added.png" alt-text="Screenshot that shows an account added to Authenticator for Android devices.":::

  7. Authenticator sets up passkey, passwordless, and MFA for sign-in according to your work or school account policies.

  8. Return to your browser after you finish the passkey setup in Authenticator, and select Next.

    :::image type="content" border="true" source="media/howto-authenticate-passwordless-passkey-ios/passkey-ios-security-info-laptop.png" alt-text="Screenshot that shows a new passkey sign-in method on Security info on your other device.":::

Alternate registrationUse WebAuthn flow from Security info if you have trouble (iOS)

If you can't sign in to Authenticator to register a passkey, you can register directly from Security info with WebAuthn.

Delete your passkey in Authenticator for iOS

To remove the passkey from Authenticator, tap the account name, and then tap Settings > Delete passkey. You also need to delete your passkey from Security info.

TroubleshootingTroubleshoot passkey registration on iOS

In some cases when you try to register a passkey, it gets stored locally in the Authenticator app but isn't registered on the authentication server. For example, the passkey provider might not be permitted or the connection might time out. If you try to register a passkey and see an error that the passkey already exists, delete the passkey that was created locally in Authenticator and retry registration.

Android

Registration

You can register by signing in to the Authenticator app directly, by using Security info, or from your mobile device browser or through cross-device registration by using another device, such as a laptop. Your mobile device needs to run Android version 14 or later.

Use Authenticator (Android)

You can sign in to Authenticator to create a passkey in the app and get seamless single sign-on across Microsoft native apps. We recommend this preferredThis flow is the recommended way to set up a passkey in Authenticator. If you're signed in or already have an account in Authenticator, you still need to complete these steps to add a passkey in Authenticator.

  1. Download Authenticator from Google Play, open it, and go through the privacy screens.

  2. Add your account in Authenticator on your Android device.device:

    • :::row::: :::column span="3":::

      If you installed Authenticator for the first time on your device, on the Secure Your Digital Life screen, tap Add work or school account.

      :::column-end::: :::column span="1"::: :::image type="content" border="true" source="media/howto-register-passwordless-passkey-direct-android/android-first-run.png" alt-text="Screenshot that shows the first screen to appear for Authenticator for Android devices." lightbox="media/howto-register-passwordless-passkey-direct-android/android-first-run.png" border="true"::: :::column-end::: :::row-end::: :::row::: :::column span="3":::

    • If you installed Authenticator on your device before but didn't add an account, tap Add account or the + button, and select Work or school account. Then tap Sign in.

      :::column-end::: :::column span="1"::: :::image type="content" border="true" source="media/howto-register-passwordless-passkey-direct-android/add-account-android.png" alt-text="Screenshot that shows how to register by using Authenticator for Android devices." lightbox="media/howto-register-passwordless-passkey-direct-android/add-account-android.png" border="true"::: :::column-end::: :::row-end::: :::row::: :::column span="3":::

    • If you already added an account in Authenticator, tap your account, and then tap Create a passkey.

      :::column-end::: :::column span="1"::: :::image type="content" border="true" source="media/howto-register-passwordless-passkey-direct-android/android-create-passkey.png" alt-text="Screenshot that shows how to create a passkey in Authenticator for iOSAndroid devices.":::

  3. You need to complete multifactor authentication (MFA).

    :::image type="content" border="true" source= lightbox="media/howto-register-passwordless-passkey-direct-ios/multifactor-auth-ios.android/android-create-passkey.png" alt-text=border="Screenshot that shows how to complete MFA by using Authenticator for iOS devices.true"::: :::column-end::: :::row-end:::

  4. Complete multifactor authentication (MFA).

  5. If necessary, tap Settings and set up a screen lock.

    :::image type="content" border="true" source="media/howto-register-passwordless-passkey-direct-android/android-account-added.png" alt-text="Screenshot that shows an account added to Authenticator for Android devices.":::

  6. Authenticator sets up passkey, passwordless, and MFA for sign-in according to your work or school account policies. Tap your account to see information, including your new passkey.

Passkey registration from

Use Security info (Android)

By default, Security info prompts users to sign in to the Authenticator app to register their passkey.

  1. On the same Android device as Authenticator or by using another device, such as a laptop, open a web browser and sign in with MFA to Security info.

    :::image type="content" border="true" source="media/howto-authenticate-passwordless-passkey-ios/enter-temporary-access-pass-laptop.png" alt-text="Screenshot that shows how to enter a temporary access pass on a laptop at 80%.":::

  2. On Security info, tap + Add sign-in method and select Passkey in Microsoft Authenticator.

    :::image type="content" border="true" source="media/howto-authenticate-passwordless-passkey-ios/select-passkey-in-authenticator.png" alt-text="Screenshot that shows how to select a passkey in Authenticator as a sign-in method.":::

    • If you already added an account in Authenticator, tap your account, and then tap Create a passkey.

      :::image type="content" border="true" source="media/howto-register-passwordless-passkey-direct-android/android-create-passkey.png" alt-text="Screenshot that shows how to create a passkey in Authenticator for iOSAndroid devices.":::

  3. You need to completeComplete multifactor authentication (MFA).

    :::image type="content" border="true" source="media/howto-register-passwordless-passkey-direct-ios/multifactor-auth-ios.png" alt-text="Screenshot that shows how to complete MFA by using Authenticator for iOS devices.":::

  4. If necessary, tap Settings and set up a screen lock.

    :::image type="content" border="true" source="media/howto-register-passwordless-passkey-direct-android/android-account-added.png" alt-text="Screenshot that shows an account added to Authenticator for Android devices.":::

  5. Authenticator sets up passkey, passwordless, and MFA for sign-in according to your work or school account policies.

  6. After you finish the passkey setup in Authenticator, return to your browser where Security info is open. Select Next. :::image type="content" border="true" source="media/howto-authenticate-passwordless-passkey-ios/complete-setup-authenticator.png" alt-text="Screenshot that shows the wizard to complete the passkey setup in Authenticator on Android.":::

  7. On Security info, you can see that the new passkey was added.

    :::image type="content" border="true" source="media/howto-authenticate-passwordless-passkey-android/passkey-android-security-info-laptop.png" alt-text="Screenshot that shows a new passkey on Android sign-in method in Security info on your other device.":::

Alternate registration

Use WebAuthn flow on Security info if you have trouble (Android)

If you can't sign in to the Authenticator to register a passkey, you can register directly from Security info with WebAuthn.

In most cases, the passkey is also deleted from Security info. If not, go to Security info and select Delete to remove it.

Troubleshooting

Troubleshoot passkey registration on Android

In some cases when you try to register a passkey, it gets stored locally in the Authenticator app but isn't registered on the authentication server. For example, the passkey provider might not be permitted, or the connection might time out. If you try to register a passkey and see an error that the passkey already exists, delete the passkey that was created locally in Authenticator and retry registration.

Related content