Entra.News Dailydaily.entra.news
Aboutmerill.net
Microsoft Entra ID

Sign in with passkeys in Authenticator for Android and iOS devices

7 July 2026Updated+22 / −23 lines

In brief

Learn how to sign in with passkeys in Microsoft Authenticator for Android and iOS. Use same-device, cross-device, or native app authentication.

Documentation change

Sign in with passkeys in Authenticator for Android and iOS devices

This article explains the sign-in experience when you use passkeys in Authenticator with Microsoft Entra ID. For more information about the availability of Microsoft Entra ID passkey (FIDO2) authentication across native applications, web browsers, and operating systems, see Support for FIDO2 authentication with Microsoft Entra ID.

Scenario iOS Android
Same-device authentication in a browser ✅ ✅1
Same-device authentication in native Microsoft applications ✅ ✅
Cross-device authentication ✅ ✅

1Support for same-device registration in Microsoft Edge on Android is coming soon.

iOS

To sign in with a passkey in Authenticator, your iOS device needs to run iOS 17 or later.

  1. To begin cross-device authentication, follow the steps in the operating system or browser prompt. On Windows 11 23H2 or later, select iPhone, iPad, or Android device.
  1. A QR code should appear on the screen. Now, on your iOS device, open the camera app and scan the QR code.
  1. When a QR code appears on the screen, open the camera app and scan the QR code.

The camera inside the iOS Authenticator app doesn't support scanning a WebAuthn QR code. You need to use the system camera app.

Follow these steps to sign in to Microsoft Entra ID with a passkey in Authenticator on your Android device.

  1. On your Android device, open your browser and go to the resource you want to access at My Security info.

  1. On your Android device, open your browser and go to the resource you want to access, such as Office.

  2. Enter your username to sign in. If you most recently used a passkey to sign in, you're prompted to sign in with a passkey. Otherwise, select Other ways to sign in, and then select Face, fingerprint, PIN or security key.

  1. When you're prompted to sign in, you have two options. You can sign in with your username or without using your username.

Alternatively, select Sign-in options to sign in without entering a username. If you selected Sign-in options, then select Face, fingerprint, PIN or security key. Otherwise, skip to the next step.

  1. Enter your username.
  2. To sign in without using your username, select Sign-in options.
  3. If you selected Sign-in options, then select Face, fingerprint, PIN or security key. Otherwise, skip to the next step. If you have more than one passkey saved to your device, you're prompted to choose a passkey.

  1. To select your passkey, follow the steps in the Android operating system dialog. Verify yourself by scanning your face or fingerprint, or by entering your device PIN or unlock gesture.

  2. To begin cross-device authentication, follow the steps in the operating system or browser prompt. On Windows 11 23H2 or later, select iPhone, iPad, or Android device.

  1. A QR code should appear on the screen. Now, on your Android device, open the system camera app and scan the QR code. You can also use the camera in Authenticator. Go to the passkey account tile and tap it. Under Passkey details, you can see a button in the lower-right corner to scan the QR code.
  1. When a QR code appears on the screen, open the camera app and scan the QR code. You can also use the camera in Authenticator. Go to the passkey account tile and tap it. Under Passkey details, you can see a button in the lower-right corner to scan the QR code.

On your other device, you're now signed in to Microsoft Entra ID.

Same-device authentication in native Microsoft applications

Same-device authentication in native Microsoft applications (Android)

You can use Authenticator on your Android device to seamlessly sign in with a passkey to other Microsoft apps, such as OneDrive, SharePoint, and Outlook.

Related content