← Resources

Setting Up a Passkey for Microsoft 365 (iPhone & Android)

A step-by-step walkthrough for creating a passkey for your Microsoft 365 account in the Microsoft Authenticator app.

Created September 5, 2026

Setting Up a Passkey for Microsoft 365 (iPhone & Android)

Passkeys are where Microsoft is heading, they're phishing-resistant, there's no code to type in, and nothing to intercept. This walks through creating one in the Microsoft Authenticator app.

Before You Start

This guide assumes you've already completed Setting Up MFA on Microsoft 365, installed Microsoft Authenticator, and added your work account to it. You'll also need:

  • iOS 17 or later, or Android 14 or later
  • A screen lock already set up on your phone (Face ID, Touch ID, fingerprint, or a PIN), a passkey relies on it

What's Different About a Passkey

A passkey replaces typing in your password and approving a push notification with a single step, your device confirms it's you (via Face ID, Touch ID, or your fingerprint) and that's the whole sign-in. It's tied to your specific device and can't be phished, guessed, or reused the way a password can.

Step 1: Create the Passkey in the App

  1. Open Microsoft Authenticator.
  2. Tap your work or school account.
  3. Tap Create a passkey.
  4. You'll be asked to complete an MFA prompt to confirm it's really you before the passkey is created.

Step 2 (iPhone Only): Enable Authenticator as a Passkey Provider

iOS needs to know Authenticator is allowed to handle passkeys:

  1. If prompted, tap Settings to jump straight there. Otherwise, go to Settings > General > Autofill & Passwords.
  2. Turn on AutoFill Passwords and Passkeys.
  3. Under Autofill From, select Authenticator.
  4. Return to the Authenticator app and tap Done to confirm.

Android handles this automatically as part of the setup in Step 1, there's no separate settings toggle to find.

Step 3: Name Your Passkey

Give it a name you'll recognize later (like "iPhone" or your device name) and tap Done. If you set up passkeys on more than one device down the line, this is how you'll tell them apart.

Signing In With Your Passkey

Next time you sign in to Microsoft 365:

  1. Enter your email address as usual.
  2. Choose Sign in with a passkey (or it may be offered automatically).
  3. Confirm with Face ID, Touch ID, your fingerprint, or your device PIN.

No password, no code, no push notification to approve separately, just your device confirming it's you.

Lost or Replaced Your Phone?

A passkey lives on the device it was created on, it doesn't transfer automatically. Submit a ticket if you get a new phone or lose your current one, and we'll get a new passkey (or your MFA method) set back up properly.

Need Help?

If you run into any issues, reach out to the Triumphant support team: