# Microsoft Authenticator

13 Hacker News commenters recommended Microsoft Authenticator and 51 criticized it, November 2025 to November 2026. It was recommended in 7 of 13 months.

**Verdict:** Recommended for working two-factor sign-in with Microsoft accounts and Teams, and for push approvals. Critics say it sends ads through notifications and blocks TOTP export.

## Why people recommend it

- Works well with Microsoft accounts (4 comments): "the account plays very nice with the Microsoft Authenticator app" ([source](https://news.ycombinator.com/item?id=46305590)) "it's been pretty seamless with Microsoft Authenticator for Teams" ([source](https://news.ycombinator.com/item?id=47253767)) "Authenticator certainly works today" ([source](https://news.ycombinator.com/item?id=47267301))
- Used for work two-factor logins (2 comments): "I'll keep using the MS authenticator on my phone for 2FA instead." ([source](https://news.ycombinator.com/item?id=50099530)) "I use microsoft authenticator, in its own work profile for work" ([source](https://news.ycombinator.com/item?id=47050041))
- Works on GrapheneOS when unrooted (2 comments): "Microsoft Authenticator works on my GrapheneOS (not rooted)." ([source](https://news.ycombinator.com/item?id=48563828)) "Microsoft authenticator should work on GOS" ([source](https://news.ycombinator.com/item?id=46452209))

## What people warn about

- Pushes proprietary 2FA instead of TOTP (3 comments): "Microsoft sites (and others) frequently require you to use their bespoke 2FA app instead of using the open TOTP protocol." ([source](https://news.ycombinator.com/item?id=50091865)) "Microsoft and others insist on using their snowflake authenticator instead of using the standard protocol" ([source](https://news.ycombinator.com/item?id=50095986)) "set the option to only allow Microsoft's proprietary 2FA, which only works with the Microsoft app" ([source](https://news.ycombinator.com/item?id=47349560))
- Won't run on GrapheneOS (3 comments): "I have at least one app that won't run under GrapheneOS (Microsoft Authenticator) so I'll be stuck with a two-phone carry" ([source](https://news.ycombinator.com/item?id=50210793)) "some apps that I need for work, like Microsoft Authenticator, no longer work under GrapheneOS" ([source](https://news.ycombinator.com/item?id=48563308)) "Trying to use Microsoft Authenticator without Google services is something circular like this" ([source](https://news.ycombinator.com/item?id=46118992))
- Pushes ads through notification permission (2 comments): "they have started abusing the notification permission granted to allow authenticator to work to push out ads for Microsoft 365" ([source](https://news.ycombinator.com/item?id=47571724)) "Microsoft blurred the line between security notifications (approve/deny prompts) and marketing." ([source](https://news.ycombinator.com/item?id=47673841))
- Number-matching overlay gets in the way (2 comments): "On Android, out of the blue, it displays global overlay to select one of the 3 numbers to confirm login." ([source](https://news.ycombinator.com/item?id=47310829)) "the default authenticator flow also has the chance of accidentally hitting the right number" ([source](https://news.ycombinator.com/item?id=48255790))

## Alternatives hackers recommend

- [Aegis Authenticator](https://hackerapproved.com/p/aegis.md): 28 recommend
- [Ente Auth](https://hackerapproved.com/p/ente-auth.md): 22 recommend
- [Google Authenticator](https://hackerapproved.com/p/google-authenticator.md): 9 recommend
- [Authy](https://hackerapproved.com/p/authy.md): 6 recommend

## Cite as

Hacker Approved, "Microsoft Authenticator", https://hackerapproved.com/p/microsoft-authenticator/ (counts from 1,795,640 Hacker News comments, November 2025 to November 2026).