The Windows Phone MS Authenticator application also works with Google, Dropbox, and Lastpass.
The Google Authenticator app on android also seems to work for Microsoft account
Since enabling two-step authentication I've been unable to use the android outlook.com app. It seems to work but then it gives you a prompt to the let the app access your info and it then fails the authentication
I was very happy about Microsoft implementing extra protection for my account, but after I enabled it, almost nothing on my phone worked any more (Windows Phone 7.5... my 7.8 update is still M.I.A!!!)...
While using "app passwords" worked for my desktop applications, they did not work for my phone apps... I couldn't even access the marketplace to install updates...
The moment I disabled two-step, everything started working again immediately (except SkyDrive, which Microsoft has acknowledged has issues at the moment, with an "update coming soon", which I wouldn't have been able to install anyway!)...
I really want to enable two-step authentication... but, for me at least, it's currently unusable and will remain disabled, for now (I will try again at some point!)... very disappointed!!!
Can you tell me a few apps that didn't work. Am curious about this.
For me, the official Outlook app failed on my Android phone. Using copy & paste, I entered my account name plus password - once with the "real" password that works in the browser,Skype, etc., and once with the special password provided by Outlook.com.
In each case, the password successfully leads to an e-mailed security code which when entered simply tells me authentication failed and 'try again later'. Three tries, three strikes. Two-factor authentication is out for me.
On my Lumia 920 mail worked fine, but app updates and Wordament did not. I used an app password in the app store, and then my apps were able update and Wordament started working. Also, my Xbox 360 required an app password to connect.
Of course... I'll try to be as descriptive as possible, but there were many issues, so I apologise if this gets a bit long ;o)
I enabled two-step while at work, sometime mid-afternoon... I had installed the Authenticator app on my phone a week or so ago, so I liked that at the same time... everything appeared to be fine, I could sign in to all my services (Outlook, SkyDrive etc.) and my account, on the web with no issues... the codes generated by Authenticator worked perfectly...
SkyDrive (Desktop, Win7) appeared to still be working fine, and Skype (Desktop) was also still fine... Outlook 2010 popped up a user-name/password box the next time it tried to sync, but entering an "App Password" worked fine... so far, so good...
Fist of all I noticed that SkyDrive (WinPhone) was refusing to sign in... supplying both my original password and an "App Password" failed... but upon visiting the Microsoft Answers site, I found an Alert stating that "Windows Phone 7 users may be experiencing difficulty signing in, an update is incoming and would be available soon"... everything else "appeared" to be working, so I thought little of it, I would await my update... I did notice though, that all my SkyDrive based albums in the photos hub, and documents in the Office hub, were fully accessible, even photos taken (with auto-upload enabled) were there when I checked SkyDrive on the web, so the phone's integration seemed to be working, just the app was having issues...
When I arrived home however, I noticed that Zune (Win8) was not signing in... it showed my user-name, but had the "Sign In" text lit-up... when I tried to sign in with my original password it said "Invalid User-Name Password Pair", when I tried to sign in with an "App Password" it said "Network Temporarily Unavailable"... ok, no problem, I was only syncing some photos anyway...
When I launched Outlook 2013, the (expected) user-name/password box popped up, and entering an "App Password" worked fine... however, a whole stack of emails arrived from the past few hours, that should have arrived on my phone first, but it was showing "no new messages"... So I started to investigate it a little further...
The phone appeared to by synchronising (from "email and accounts") fine, there were no "attention required" messages... but clearly it wasn't actually "working" as still there were no emails...
I tried several apps and games after that... Skype said "No connection/service", most games reported "could not connect to XBox Live"... clearly there was a problem...
I tried changing the password for my Live account to an "App Password", but that failed, as it wouldn't accept it... so I returned to my original password, which again "appeared" to work, but clearly didn't!!!
I had been intending to install an update to an app, that I'd bee waiting for and found out was now available... but my phone never (very, very rarely) informs me of updates, I have to hear about them elsewhere (like here), and visit the store on the web and click "re-install" for the app I want to update (it's slightly annoying, but has always worked)... so I went to get my update, but the store reported "could not contact your phone, check settings and try again"... but when I looked at the store on the phone it said "1 download" (the app!), which said "requires attention"... when I tapped it, it showed a message saying "there is a problem with your live ID, try again, or sign in with another ID" (the 1st acknowledgement from my phone that there was indeed an "issue"!)... tapping "try again" did nothing but return to the "attention required" status, and I have no idea how to "sign in with a different ID", even if I had one... it's obviously not the account in "email and accounts", that appears to be for hotmail/outlook, not the phone... and changing that password hadn't worked earlier anyway...
Anyway... by this point, I was getting quite frustrated with all these issues, and decided to "try" disabling two-step, just to see if this was actually the cause... almost the instant that I clicked the "disable" button on the website, everything started working again... I still had Zune open on a different monitor, and it signed itself in with no interaction... all the missing emails appeared on my phone in a matter of seconds.... Skype on the phone would connect once again... all the games launched with no "could not connect" messages... and tapping "try again" on my download, caused it to simply download with no issues at all... even several multi-player game requests that I was unaware of, suddenly appeared on the games tile...
Back on my desktop (Win8), I had to re-enter my original password for Outlook 2013, which worked fine... and unexpectedly (since they required no attention before) SkyDrive (desktop) showed a dialog saying "there's an issue with your live ID, please sign in again", and then promptly froze and had to be ended through task manager(!), when I relaunched it, I was asked to sign in, which worked fine... Skype (desktop) also just logged me out, but I could log in again without problems (though it will not connect to Facebook any more, but I don't really care, as I don't like its Facebook integration anyway)...
When I arrived back at the office today, the same 3 programs had issues (Outlook, 2010 this time, SkyDrive, which froze again, and Skype, which is now without Facebook), but everything appears to be working after signing in with my original passwords...
Since disabling two-step, everything has gone back to "normal" (the everyday trials of Windows Phone 7 remain, but I've learned to live with them)... the only thing that still fails to sign in is SkyDrive, but I'm aware that I'm not alone in that, and at least now when the update is available (and I read about it somewhere) I can install it again...
Overall, this was a far less than successful "improvement" for me, and, for now at least, will remain disabled... I'll stick with long complex passwords for now... I hope that people using Windows Phone 8 (and maybe even Windows Phone 7.8... if my update ever arrives, I will try two-step again then) have had a better experience, because two-step is clearly a good thing, I'm left disappointed that I cannot use it ;o\
Thanks for highlighting this, Mass. No, people with Windows Phone 8 don't have a better experience. I also had several apps stop working, regardless the fiddling. For now I'm leaving two-factor switched firmly off. Pity, really. My online life is becoming more and more Microsoft-centric. I would like the absolute maximum security. PS., you have your trials nicely set out here. You should post to http://http://answers.microsoft.com/. I've had a good success rate with them.
I had the same issues (also wp 7.5). Skydrive, mail, marketplace didn't work. I tried all forms of authentication and could not get it to work. As soon as I disabled all three worked immediately.
Note, when you unlink your accounts as you must to enable 2-step auth, you cannot go back and re-link the accounts. Once you have 2-step auth enabled, linking to existing outlook/hotmail accounts is not possible. Currently, the only way to link accounts is for both to be 1-step auth accounts.
I enabled two-step authentication and was no longer able to log into my Xbox. I was prompted for my account email and password, but keeps telling me it is incorrect or I do not have an xbox live account. :(
I had to disable two-step authentication before I was able to log back into xbox.live.
I'm on the road this week, and will run into this when I get home. I believe you need to create an app password and use *that* to sign into the Xbox.
You have to set up an app password through your microsoft account for your xbox to work. Same goes for any app that accesses your Microsoft account.
I sometimes use Skype for Desktop, and I login using my Microsoft Account. If I use two-step authentication for my account, then does that mean each time I sign out of Skype, and re-sign into Skype, I have to provide a code in addition to the password? If so, because I don't have unlimited texting, my options become "call me with a code" or "email a different account with a code"... Both of which are, for me, too much of a nuisance for just logging into Skype.
Is there no other way?
After setting up 2-factor auth this morning, I re-installed Windows 8 on two separate machines. Neither could be "Trusted" after logging in. It didn't even send the text and email to establish trust. I subsequently disabled 2-factor auth, re-installed again, and "Trust" was easily established.
Two factor authentication does not work with the newly released Outlook mail client for Android.
Skydrive worked for me by using a application specific password.
I tried this and your instructions are much more thorough than others out there. I am glad Microsoft did this as I manage subscriptions and sync files with these accounts and always felt odd that it was all protected by a regular password. It seems Microsoft is moving out of the RSA key fob or 90-day password mode quickly which is good for all our security.
Brian, I had the same problem, but it looks like that they fixed it. Now it's working just fine.
it looks like that there were some issues yesterday. Android outlook.com was failing to authenticate. Also, on Surface RT, I wasn't able to get rid of the "Trust this PC" message. Today, everything works just fine. It looks like that they fixed it!
Great thing is that same Authencation smartphone app can be used also for Google account, and on iOS and Android you can use Google Authenticator for Microsoft and Google accounts :) - standards are great thing.
can anybody recommend an authenticator app for iOS? can't find one that will work
I'm really getting confused about all of this, and am quite frankly a little on leery side about using it. Paul you stated
" You cannot have other Microsoft accounts linked to the Microsoft account for which you are trying to enable two-step authentication. If you do, you’ll be prompted to unlink the accounts."
I have 2 MSFT accounts, and yes they are linked. Will I be able to re-link them after I do this?
No, you won't be able to re-link them unless you disable two-step authentication (on each, if it's on both).
Same here...as soon as two-step enabled, mail and store stopped working on win phone 8
thank you Paul for the instructions. I set up my MS account with the two-step without TOO much issue. However I found that when I tried to use the Authenticator program on my phone to generate a code while typing in password information on the phone itself, it was impossible for me to switch between the two apps on the phone successfully without creating a vicious cycle.. I ended up needing to get the application password sent to a e-mail account on a computer. I do note that the Authenticator program was updated this morning, with luck that issue was fixed.
I'll try the app pw again. I couldn't get it to work with my xbox the first time and also tried the authenticator app with no luck.
Enabled 2 step authentication on Friday morning with Google Authenticator and everything worked like a charm.
I enabled two-step on my account and then proceeded to install the Authenticator app on my Windows Phone 8. It would fail with a message that there was a problem with my Microsoft account,
After disabling two-step, I retried the Authenticator installation and it completed without a hitch, and pairing also had no problems. So it would appear that you need to install the app before you enable two-step.
No you don't. I did it in the reverse order--two step then the app--and when you think about it, people will of course be installing this app on different phones down the road. In fact, I did that as well.
Paul, I set this up after watching Windows Weekly on Saturday the 20th April. All worked well, until I found out that the email my Lumia 920 was not working. Kept asking for User name and Password and saying "Incorrect User Name or Password". I was able to log into my Hotmail account from my SurfaceRT as well as from my Windows 7 and Windows 8 desktops. Thinking something was amiss I rand Nokia and spoke to a call centre in the Phillipines who proceeded to tell me to reset my phone. I asked if she was sure if I had to do this and she said yes!. After about 4 hours of a screen showing rotating gears, I thought something was wrong and checked the internet to find some advice on how to get control back of the phone when stuck at this screen. All seemed OK and when the Lumia rebooted it again asked for the Hotmail account and again!! could not get log into my Hotmail account. Spoke to Nokia tech support and was told that it was a carrier problem. Spoke to the carrier (Telstra) and they said it was a Nokia problem.
After going back to my old HTC Mozart (which does not have a SIM card in it but is still connected via wifi) I noticed I could no longer log into my Hotmail account from it as well. Thinking that this may have something to do with the two step authentication - that I set up on Saturday - I went back and disabled two step authentication. After that all worked fine.
Word of warning - two step authentication is not working in Australia as yet. You would have thought that Nokia and the carrier (Telstra) would have know this and advised beforehand.
I am now back to trying to get my Lumia 920 the way it was before all this happened.
BTW any advice on how to restore apps that were already purchased as the my WindowsPhone site shows all the apps I purchased but keeps saying
"We can't send apps to your phone right now. Please try again later."
You need to use an app password.
..oops - so embarrassed - push notifications were not enabled on my Phone. So, enabled them and all worked OK!!
Paul, can you revisit using Authenticator in reference to resetting a Windows Phone. I have Authenticator setup for my Microsoft Account. I recently had to reset my phone (due to the "Other Storage" issue). When setting up the phone again, I couldn't log back into the phone with my MS Account. I got on with Windows Phone Support online, they told me to reset my MS Account password. They never asked if I had Authenticator setup. After resetting my password, I couldn't even get back on the WP Support Chat. I ended up going to a Microsoft Store. While they didn't immediately know what the problem was, speaking with them reminded me that I had Authenticator setup and that was the problem. Neither of the staff suggested setting up an App password, which I forgot about. I ended up disabling the two-step authentication on my MS Account and then I was able to login on my phone to set it up. Anyway, I am sure there are other WP owners that will run into the same problem. A new/updated article on the topic would be great. Thanks.
Is two-factor authentication worth all the hassle of not being able to connect your accounts?
I wish that point had been raised in the article a bit more clearly. I assumed that I'd be able to re-link them after setting this up.
What point? It works fine.
Think i'll wait until Paul makes this a bit clearer. I'd advise everyone else to do the same.
So this is working just fine for me across all the devices I have. What problems are you having?
I activated 2-step authentication, added the app to my 8X, and got started. I used the outlook web page to create an app password for my mail account on my phone, and mail was working great. However, I couldn't use the marketplace and my XBOX Music matched songs weren't streaming. I couldn't figure out what was wrong, and was about to turn off 2-step.
Then I thought, "Hey, why don't I try re-starting my phone?"
So I turned my phone off, turned it back on, and now everything is working as advertised.
Long story short, if you are using WP8, try restarting your phone before you give up on the new security protocols.
I have activiated and as well configured Google Authenticator successfullly. I'm using an iPhone.
However, here stops the success :-(
I can no longer login to the SkyDrive app on my iPhone. On my Mac OS machine i works via SMS. Created an App password, and tried that - still not working.
Then i tried my Azure login. After getting the SMS the login fails with code: 80045C17
Small note on the Text/SMS service. I feel that it randomly fails to deliver a SMS. Works flawless with Google 2-factor. It also is rather slow (approx 15 sec) to deliver to my phone in Sweden.
If instead use the Call me feature, it quickly get an Internation call (from Buena Park, CA) and a swedish female voice tell me the code.
Also one note comparing with Google. I looks that I will not be able to remove App passwords selectively. I can only delete them all - then I would have to re-establish all my devices / apps all over!
Paul, as a WW listener I feel that I know you and can ask for some help...
MS two factor authentication has created a catch-22 problem for me. In October I got a new iPhone5 from my company and I was required to return my old phone that had the Google Authenticator app. Some how I messed up my outlook.com password. MS will not let me reset my password without access to the authenticator and I cannot install the authenticator on my new iPhone without logging in to my account.
When I send MS a message they sent a reset code but then it requires a second form of authentication to reset which I do not have. They ask for more info that I have difficulty supplying like which phone number I used (I have 6+) or which credit card I used (I have 20+). I can never give them the right combination.
Is there someone I can contact at MS to resolve this problem so I can use Office365 on my new notebook computer?
SuperSite for Windows
Sponsored Introduction Continue on to (or wait seconds) ×