Blog Post

Microsoft Entra Blog
2 MIN READ

Securely manage and autofill passwords across all your mobile devices with Microsoft Authenticator

Alex_Simons's avatar
Alex_Simons
Icon for Microsoft rankMicrosoft
Feb 05, 2021

Howdy folks,

 

Today we are announcing the general availability of password management and autofill capability in the Microsoft Authenticator app. Ever since we announced the public preview, we’ve seen a lot of interest among both enterprises and individual users. Users love the convenience of the Authenticator app syncing and autofilling their strong passwords for all their identities even as they move across devices - mobile or desktop. On desktops, you can autofill these passwords using either Microsoft Edge or Google Chrome extension.

 

The passwords are saved as part of your personal Microsoft account and they are encrypted both on the device as well as in the cloud. In addition, every password autofill from the Authenticator requires the same bio-gesture you provide for sign-ins, enforcing a multi-factor authentication.

 

Since the public preview, we have made a few additional changes to this feature:

 

  • Enable autofill even when a work account is added to the Authenticator - During the preview, the autofill feature was disabled if a work account was configured in the Authenticator app. Based on your feedback, we have now allowed this Microsoft account-based capability for your users even when they have a work account in the Authenticator app. Enterprises can request this feature to be disabled on Authenticator apps that have work or school accounts added.
  • Passwords import – We also saw a lot of interest for importing existing passwords from your other password solutions. We have added support for importing passwords from Google Chrome and select password managers.

 

Autofill is rolling out in Authenticator app on iOS (iOS 12.0+) and Android (Android 6.0+). To learn more about the autofill feature, visit our FAQs page.

 

 

 

 

As always, we’d love to hear from you. Please let us know what you think in the comments below or on the Azure AD feedback forum. 

 

Best regards,

Alex Simons (@Alex_A_Simons)

Corporate VP of Program Management

Microsoft Identity Division

 

Updated Aug 19, 2021
Version 3.0

14 Comments

  • Pontus T, thanks for sharing. Your concern is noted. For now, you can configure this feature for all your users by clicking here. We will add additional controls in this over time. Also, if you are interested in sharing your enterprise needs from a password management pov, we'd love to do a deep dive with you. Thanks for your many contributions in this forum since 2016.

  • Pontus T's avatar
    Pontus T
    Iron Contributor

    Good news, but how do I prevent users from signing in to that personal account on our MDM devices? We do not want Authenticator signed in with a work account, now allowing users to store corporate credentials via a personal account, for obvious reasons. Maybe I have not closely enough on app config profiles for Authenticator.