Microsoft Entra ID

Sign in with passkeys in Authenticator for Android and iOS devices

In brief

Learn how to sign in with passkeys in Microsoft Authenticator for Android and iOS. Use same-device, cross-device, or native app authentication.

What Entra admins need to know

Review the documentation change to determine whether it affects tenant configuration, security posture, or rollout plans.

This editorial summary was generated by AI from the documentation changes. Verify important details in the full Microsoft Learn article.

Documentation change

Open on Microsoft Learn ↗

The comparison below is an extract of the Microsoft Learn article showing only the changed content. Open the full article for complete context.

Sign in with passkeys in Authenticator for Android and iOS devices

This article explains the sign-in experience when you use passkeys in Authenticator with Microsoft Entra ID. For more information about the availability of Microsoft Entra ID passkey (FIDO2) authentication across native applications, web browsers, and operating systems, see Support for FIDO2 authentication with Microsoft Entra ID.

ScenarioiOSAndroid
Same-device authentication in a browser1
Same-device authentication in native Microsoft applications
Cross-device authentication

1Support for same-device registration in Microsoft Edge on Android is coming soon.

iOS

To sign in with a passkey in Authenticator, your iOS device needs to run iOS 17 or later.

  1. To begin cross-device authentication, follow the steps in the operating system or browser prompt. On Windows 11 23H2 or later, select iPhone, iPad, or Android device.

  2. AWhen a QR code should appearappears on the screen. Now, on your iOS device,screen, open the camera app and scan the QR code.

    The camera inside the iOS Authenticator app doesn't support scanning a WebAuthn QR code. You need to use the system camera app.

Follow these steps to sign in to Microsoft Entra ID with a passkey in Authenticator on your Android device.

  1. On your Android device, open your browser and go to the resource you want to access, such as Office.

  2. WhenEnter your username to sign in. If you most recently used a passkey to sign in, you're prompted to sign in, you have two options. You canin with a passkey. Otherwise, select Other ways to sign in with your username, and then select Face, fingerprint, PIN or without using your username.security key.

    1. Enter your username.
    2. To sign in without using your username,

      Alternatively, select Sign-in options.

    3. to sign in without entering a username. If you selected Sign-in options, then select Face, fingerprint, PIN or security key. Otherwise, skip to the next step. If you have more than one passkey saved to your device, you're prompted to choose a passkey.
  3. To select your passkey, follow the steps in the Android operating system dialog. Verify yourself by scanning your face or fingerprint, or by entering your device PIN or unlock gesture.

  4. To begin cross-device authentication, follow the steps in the operating system or browser prompt. On Windows 11 23H2 or later, select iPhone, iPad, or Android device.

  5. A QR code should appear on the screen. Now, on your Android device, open the system camera app and scan the QR code. You can also use the camera in Authenticator. Go to the passkey account tile and tap it. Under Passkey details, you can see a button in the lower-right corner to scan the QR code.

  1. To select your passkey, follow the steps in the Android operating system dialog. Verify yourself by scanning your face or fingerprint, or by entering your device PIN or unlock gesture.

  2. To begin cross-device authentication, follow the steps in the operating system or browser prompt. On Windows 11 23H2 or later, select iPhone, iPad, or Android device.

  3. When a QR code appears on the screen, open the camera app and scan the QR code. You can also use the camera in Authenticator. Go to the passkey account tile and tap it. Under Passkey details, you can see a button in the lower-right corner to scan the QR code.

On your other device, you're now signed in to Microsoft Entra ID.

Same-device authentication in native Microsoft applications (Android)

You can use Authenticator on your Android device to seamlessly sign in with a passkey to other Microsoft apps, such as OneDrive, SharePoint, and Outlook.


Related content