Recommended Free Tools
iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Microsoft Authenticator failures usually come from one of four places: an outdated app, blocked phone notifications, an incorrect device clock, or an account that is still registered to another phone. Start with the checks below before deleting the app or resetting an account.
These steps apply to both Android and iPhone. Menu names can vary slightly by phone manufacturer and operating-system version.
1. Update Authenticator and restart the phone
Microsoft does not support Authenticator app versions more than 12 months old. Open your phone’s app store, search for Microsoft Authenticator, and install any available update.
Then open Authenticator and check Settings. Make sure App updates is enabled. Also install pending updates for:
#1 Best Overall
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
- Your Android or iOS operating system
- Microsoft Defender
- Intune Company Portal, if your phone is managed by work or school
Restart the phone after updating. A restart is particularly useful after correcting the phone’s clock, changing notification permissions, or switching network connections.
Use Microsoft’s current Authenticator troubleshooting guide if the app itself will not update or open.
2. Check the connection, VPN, and phone clock
Authenticator needs a working network connection for push approvals and account synchronization. Test the following:
- Turn off Airplane mode.
- Switch from Wi-Fi to mobile data, or from mobile data to a different Wi-Fi network.
- Temporarily disconnect a VPN, proxy, or traffic-filtering security app.
- Set the phone’s date and time to automatic.
- Restart the phone and try the sign-in again.
A manually set or inaccurate clock can cause approval requests to expire repeatedly, even when the phone appears to be online. On Android, look under Settings > System > Date & time (the wording differs by manufacturer). On iPhone, use Settings > General > Date & Time > Set Automatically.
3. Turn on Authenticator notifications
If the approval arrives only when you open Authenticator, or does not arrive at all, check both the app and operating-system notification settings.
- In Authenticator, open Settings > Notification Settings.
- Make sure Show notifications is enabled.
- In the phone’s Settings app, allow notifications for Microsoft Authenticator.
- Allow sound and vibration if you rely on an audible alert.
- Temporarily turn off Do Not Disturb, Focus, Quiet mode, or any scheduled notification filter.
If notifications from several unrelated apps are also missing, the problem is probably the Android or Apple notification system rather than your Microsoft account. Check the phone’s general notification, battery, and background-data settings.
For synchronization problems, Microsoft also recommends opening Authenticator’s Settings and selecting Turn off battery optimization. On some Android phones, separately set Authenticator to allow unrestricted background battery use.
Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstall4. The prompt may be going to an old phone
Microsoft commonly sends an Authenticator push to the device where the app was last used. If you replaced your phone but did not remove the old registration, check the old phone for the request.
You have three options:
- Approve the request on the old phone, if you still control it.
- Remove the old device registration from your work, school, or Microsoft account security settings.
- Choose another verification method, such as SMS, if your organization has enabled one.
Do not approve a request you did not initiate. An unexpected prompt can indicate that somebody else is trying to sign in to your account.
Rank #2
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
5. Understand number matching
For normal Microsoft Entra Authenticator push authentication, number matching is required. You cannot switch it back to universal Approve/Deny prompts.
When signing in through a browser such as Edge, Chrome, or Safari:
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
- Start the sign-in on the computer or browser.
- Open the Authenticator notification on the phone.
- Enter the number shown on the sign-in screen.
Microsoft mobile apps such as Teams and Outlook can show a Yes/No prompt when the sign-in is taking place in the app on the same device. That behavior is different from a browser sign-in.
Number matching also applies when Authenticator is being registered through combined security-information registration. An old Authenticator version that does not support number matching cannot complete the sign-in; update the app first.
Apple Watch and Android wearables cannot complete number-matching push approvals. Use the phone. The separate, deprecated Azure Multi-Factor Authentication Server is an exception, but that does not change the requirement for ordinary Microsoft Entra Authenticator push authentication.
6. Remove and re-add one affected account
If notifications work for some accounts but not another, the affected account’s registration may be damaged. Remove only that account from Authenticator and add it again.
Free tools Windows power users keep installed
One-click scans. No signup required.
- Open Authenticator and select the affected account.
- Open the account options and choose Remove account.
- On a computer, sign in to the account’s security-information page and choose to add Microsoft Authenticator again.
- Scan the new QR code with Authenticator.
- Allow notifications when prompted.
- Complete the test approval, including number matching if it appears.
For a work or school account, your administrator may need to reset the MFA registration before you can scan a new QR code. Do not remove the only working verification method unless you have another way to sign in or an administrator can help.
7. Fix Android-only errors
“Google Play services are currently unavailable on this device”
Authenticator push notifications on Android require both Google Play services and the Google Play Store. Confirm that both are enabled and up to date, and make sure Authenticator notifications are allowed.
Phones without Google Mobile Services may not support this push-notification workflow. In that situation, use an available alternative method or follow your organization’s device-support policy.
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Passwordless setup will not complete
Android work or school passwordless setup requires more than the Authenticator app. The phone needs:
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →- A device PIN or biometric unlock
- Hardware encryption
- Registration with the organization
For a work profile, the PIN or biometric must also be enabled for that profile. In Authenticator, check Settings > Device Registration. The account must be registered for passwordless sign-in and joined to the work or school organization before you retry setup.
8. Restore Authenticator on a new phone
Reinstalling Authenticator does not automatically transfer every account. Backup and restore work only between the same platform type: an Android backup cannot be restored to iPhone, and an iPhone backup cannot be restored to Android.
Android backup
On the old Android phone:
- Open Authenticator > More > Settings > Cloud Backup.
- Turn on Cloud Backup.
- Select the Microsoft personal account that should hold the backup.
- Tap OK.
If the backup was saved to the wrong personal Microsoft account, turn off Cloud Backup, select OK to delete the existing backup, then enable it again and choose Continue or Change account.
iPhone backup
On iPhone, Microsoft requires iCloud Drive, iCloud Keychain, and iCloud Backup. In iCloud’s saved-app list, search for Authenticator and enable its toggle. The app should be version 6.8.33 or later, and it must have been opened at least once on the old iPhone.
If the backup does not appear on the new iPhone, Microsoft’s documented sequence is to uninstall and reinstall Authenticator. The backup should then appear during setup.
Restore the backup
- Install Authenticator on the new phone.
- Open it and select Restore from backup (or Begin recovery).
- Sign in with the personal Microsoft account used to create the backup.
- Complete any requested verification.
If Restore from backup or Begin recovery is missing, sign out of or remove all accounts in Authenticator first, then reopen the recovery flow.
A restored work or school account normally brings back only the account name; you must sign in again. A personal passwordless account may also require sign-in. One-time-password accounts can restore their rotating codes.
For the message “Sign in to restore your account”, select Restore from backup or Begin recovery first. Then tap Sign in for the affected account, enter its password, and confirm the requested email address or phone number.
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Fix the driver behind crashes, sound loss and screen glitches3Repair Windows errors before they cause bigger problemsRank #4
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
If you cannot access the personal Microsoft account that contains the backup, Microsoft says support agents cannot restore the Authenticator data. Recover that account first, or add each service to Authenticator again.
9. Fix QR scanning and confusing account tiles
QR scanning for adding an account requires the latest Authenticator version. Update the app before troubleshooting the phone camera. Also make sure the QR code is displayed at a readable size, the camera lens is clean, and the code has not expired.
A gray or inactive account tile is not necessarily broken. Microsoft says some inactive entries were created by another application for single sign-on. They do not require management and can generally be ignored.
An approximate or incorrect location shown in an approval notification can also be normal. Authenticator uses location data supplied by the phone’s operating system; Microsoft says the actual coordinates are not stored on Microsoft servers.
10. Authenticator passwords and Autofill no longer work
Authenticator is no longer a working password-autofill solution. Microsoft discontinued Authenticator Autofill in mid-August 2025, and the Microsoft Autofill Chrome extension was retired on December 14, 2024. Passwords also became inaccessible in Authenticator during the August 2025 shutdown.
If you are importing passwords into another supported password manager using a CSV file, Microsoft says the first row must contain exactly these three headers:
| URL | username | password |
|---|---|---|
| https://example.com | name@example.com | example-password |
Every row must contain a value in the URL and password columns. Incorrect CSV formatting is the most common import failure documented by Microsoft.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.11. Check rooted or jailbroken phones
Microsoft’s current troubleshooting documentation says it planned to introduce detection for rooted or jailbroken devices beginning in February 2026, preventing work or school Microsoft Entra credentials from functioning on those devices. The documentation retains future-tense wording, so it does not establish that the rollout is complete everywhere.
If Authenticator is being used for a managed work account on a rooted or jailbroken phone, contact the organization’s administrator and test on a supported, unmodified device.
Best Value
- FIDO2 & Passkey Ready: Business-ready and FIDO2 L1 certified. This key is supported by major management suites and is ideal for both individual and enterprise deployment. Works seamlessly with Gmail, Facebook, GitHub, Dropbox, Coinbase, and more.
- Universal Connectivity (USB-A ): Features a built-in USB-A connector—simply unfold the key and plug it into your compatible PC or laptop for seamless authentication on the go.
- Dedicated Manager App: Use the Thetis Manager App for the initial hardware PIN setup. Setting the PIN on the device first ensures a smooth registration process. Once the PIN is configured, you can begin registering the key across your favorite FIDO2-compatible online services.
- Ultra-Durable & Portable: Featuring a rotating metal cover, this key is water, crush, and tamper-resistant. It fits easily on a keychain and requires no batteries or network connectivity.
- Check FIDO2 compatibility before purchase - Known limitations: ID Austria is not supported (requires FIDO2 Level 2). Windows Hello login only works with Windows Enterprise editions that support Entra ID, and NFC is NOT supported.
12. Send diagnostic logs to Microsoft
If the checks above do not resolve the problem, open Authenticator’s top-level menu and select Send feedback. This submits diagnostic information from the app.
Microsoft says logs remain in the app until you choose that option and may include email addresses, server addresses, IP addresses, device name, and operating-system version. Review that implication before sending the report.
For a work or school account, your Microsoft 365 or Entra administrator may be able to reset the Authenticator registration, issue a temporary access pass, or provide another sign-in method. Authenticator is designed for smartphones and is not available as a desktop computer app. There is no Microsoft command-line repair command for it; the documented fixes are app and phone settings, account re-registration, backup and restore, and support escalation.
Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Repair Windows errors before they cause bigger problemsFix Now →FAQ
Why am I not receiving Microsoft Authenticator notifications?
Check Authenticator’s Settings > Notification Settings, the phone’s notification permissions, Do Not Disturb or Focus modes, network connectivity, VPN settings, and battery optimization. The request may also be going to an older phone where Authenticator is still registered.
Can I turn off number matching in Microsoft Authenticator?
No. Microsoft requires number matching for Authenticator push notifications in normal Microsoft Entra authentication. Browser sign-ins require entering the displayed number; Teams and Outlook may show a Yes/No prompt when the sign-in occurs in the same mobile app.
Will reinstalling Authenticator transfer my accounts to a new phone?
No. Use the same-platform backup and restore process. Work and school accounts generally require you to sign in again after restoration, and a backup from Android cannot be restored to iPhone or vice versa.
Why does Authenticator say Google Play services are unavailable?
On Android, enable and update Google Play services and the Google Play Store, and allow Authenticator notifications. Devices without Google Mobile Services may not support this push-notification method.
Why did Microsoft Authenticator Autofill stop working?
Microsoft discontinued Authenticator Autofill in mid-August 2025. The Microsoft Autofill Chrome extension was retired on December 14, 2024, so Authenticator should no longer be used as a password-autofill solution.
Can Microsoft Support recover an Authenticator backup if I cannot access its Microsoft account?
Microsoft says support agents cannot restore the Authenticator data in that situation. Recover the personal Microsoft account that contains the backup, or add the affected accounts again.
The Bottom Line
Update Authenticator, restore notifications and automatic time, test another network, and check the old phone before removing an account. If the problem began after changing phones, use a same-platform backup rather than relying on a reinstall. For managed work or school accounts, an administrator may need to reset MFA registration or provide a temporary alternative sign-in method.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
