Google Authenticator Setup in Microsoft: Step-by-Step

This guide walks you through adding your Microsoft account to Google Authenticator for two-step verification. You’ll link the authenticator app to your Microsoft login so that after entering your password, you’ll be prompted for a rotating 6-digit code from the app. This adds a strong layer of security against unauthorized access. Before starting, make sure you have your Microsoft account password and access to the email or phone number associated with it for verification.

What You’ll Need

• Your Microsoft account login credentials (email and password).
• A smartphone or tablet with the Google Authenticator app installed (available for iOS and Android).
• Access to the recovery email or phone number linked to your Microsoft account, in case verification is needed.

Step-by-Step

1. Open your Microsoft account security settings. Go to account.microsoft.com and sign in with your Microsoft account. If you’re already signed in, click your profile picture in the top right and select “My Microsoft account.” Then navigate to the “Security” tab.
2. Go to the “Advanced security options” page. In the Security section, you’ll see a link or a button labeled “Advanced security options.” Click it. You may be asked to verify your identity with a code sent to your recovery email or phone.
3. Find the “App passwords” or “Authenticator app” section. Scroll down to find the area for “Additional security options.” Look for a link that says “Set up an authenticator app” or “App passwords.” Microsoft’s interface changes over time, but the authenticator app setup is usually under “Two-step verification” or “Ways to prove who you are.”
4. Choose “Authenticator app” as your method. If you see a list of verification methods, select “Authenticator app” or “App” and click “Set up” or “Add.”
5. Open Google Authenticator on your phone. Launch the app. Tap the plus (+) icon, usually at the bottom right, to add a new account.
6. Scan the QR code. Microsoft will display a QR code on your computer screen. In Google Authenticator, choose “Scan QR code” and point your phone’s camera at the screen. The app will automatically add your Microsoft account and start generating 6-digit codes.
7. If you can’t scan, enter the secret key manually. Microsoft also provides a secret key (a long string of letters and numbers) that you can type into Google Authenticator. In the app, select “Enter setup key,” type any account name (e.g., “Microsoft”), paste the key, and tap “Add.”
8. Verify the code. After adding, Microsoft will ask you to enter the 6-digit code currently shown in Google Authenticator to confirm everything works. Type it into the field and click “Next” or “Verify.”
9. Save your recovery codes. Microsoft will display a list of recovery codes. These are one-time use codes that can get you into your account if you lose your phone. Save them in a safe place (e.g., a password manager or a printed copy). You’ll need them if you ever lose access to the authenticator app.
10. Complete the setup. Click “Done” or “Finish” to finalize. Your Microsoft account is now protected with Google Authenticator. The next time you sign in, you’ll be prompted for a code from the app.

Common Mistakes

• Skipping the verification step. Some users close the browser window after scanning the QR code, but Microsoft requires you to enter the code from the app to confirm the setup. If you skip this, the authenticator won’t be active.
• Deleting the authenticator entry before saving recovery codes. If you remove the account from Google Authenticator before saving the recovery codes, you could lock yourself out.
• Using the wrong Microsoft account. Make sure you’re signed into the Microsoft account you actually want to protect. If you have multiple accounts, double-check the email address shown on the security page.
• Not keeping the phone time synced. Google Authenticator relies on your phone’s clock. If the time is off, codes won’t match. Enable automatic date and time in your phone settings.

Tips

• Enable two-step verification first. Microsoft may require you to turn on two-step verification before allowing you to set up an authenticator app. If you don’t see the option, enable it first in the “Two-step verification” section.
• Use a password manager to store recovery codes. This ensures you always have access, even if you lose the physical copy.
• Add the same account to multiple devices. You can scan the same QR code on a second phone (during setup) to have a backup authenticator. However, Microsoft may only allow one active authenticator app at a time. If you need a backup, consider writing down the secret key and storing it securely.
• Keep your phone’s time zone updated. When traveling, ensure your phone’s time zone is set correctly, or the codes may be rejected.

Troubleshooting

• QR code won’t scan. Clean your camera lens and ensure the screen brightness is high. If it still fails, use the manual setup key option.
• Codes are not accepted. Check that your phone’s date and time are set to automatic. If they are, try refreshing the code in the app (the code changes every 30 seconds). If the problem persists, remove the account from Google Authenticator and re-add it using the secret key.
• You lost your phone after setup. Use a recovery code to sign in, then go to security settings and remove the old authenticator app. You can then set up a new one.
• You don’t have a recovery code. If you’re locked out, you’ll need to use Microsoft’s account recovery process. This typically involves verifying your identity through a phone number or email on file. Go to account.live.com/acsr and follow the prompts.
• The “Authenticator app” option is missing. This can happen if two-step verification isn’t enabled. Go to “Two-step verification” and turn it on first. Also, make sure you’re on the “Advanced security options” page, not the basic security page.

Frequently Asked Questions

Can I use Google Authenticator for my Microsoft work or school account?

Yes, but your organization’s admin must allow third-party authenticator apps. If the option isn’t visible, contact your IT department.

What if I get a new phone?

Install Google Authenticator on the new phone, then sign in to your Microsoft account using a recovery code. Go to security settings, remove the old authenticator app, and add the new one by scanning a new QR code.

Is Google Authenticator better than Microsoft Authenticator?

Both are secure. Google Authenticator is simpler and works offline, while Microsoft Authenticator offers push notifications and cloud backup. Choose the one you prefer; the setup steps are nearly identical.

Can I have Google Authenticator on two phones for the same Microsoft account?

Microsoft generally allows only one authenticator app active at a time. If you try to set up a second, it may invalidate the first. Use recovery codes as a backup instead.

What happens if I uninstall Google Authenticator?

You’ll lose the codes and won’t be able to sign in without a recovery code. If you have recovery codes, you can use one to get back in and then set up the app again.

Does Google Authenticator work offline?

Yes, it generates codes locally on your device, so no internet connection is needed. This is one of its main advantages.

Related

• Microsoft Store Error 0x8004e108 Fix in Windows 10
• 0x80070057 Error: Fixed in Windows
• BitLocker Password Protection Methods Explained