Signing In to Your Work Account

← All guides

Set Up Microsoft Authenticator

iPhone  |  About 5 minutes

What this is for. Microsoft is switching off sign-in codes sent by text message on 1 February 2027. The Microsoft Authenticator app replaces them. It is quicker, and much safer.

You will need: your iPhone, and a computer.

1Install the app

1. On your iPhone, tap or type this link: aka.ms/authapp
2. Install Microsoft Authenticator.
3. Already have it? Check for an update and install it.

2Open your security settings

1. On your computer, go to mysignins.microsoft.com/security-info
2. Sign in with your work email address.
3. Click Add sign-in method.
4. Choose Microsoft Authenticator.
5. Click Next on the screens that follow.
6. A square QR code appears. Leave it on screen.

3Scan the code

1. Open Microsoft Authenticator on your iPhone.
2. Tap the + at the top.
3. Tap Work or school account.
4. Tap Scan a QR code.
5. Tap OK if it asks to use your camera.
6. Point your phone at the QR code on your computer.

4Say yes to notifications

Tapped the wrong one? Go to Settings → Authenticator → Notifications and turn on Allow Notifications.

5Finish the test

1. Your computer shows a two-digit number.
2. A notification appears on your phone. Tap it.
3. Type the number into the app.
4. Tap Yes.

If something goes wrongopen

Problem	What to do
Nothing happens when I sign in	Notifications are switched off. Go to Settings → Authenticator → Notifications and turn them on.
The QR code will not scan	Turn your screen brightness up. If it has been on screen a while, start again from Step 2.
I cannot see “Work or school account”	Your app needs updating. Go back to Step 1.
I already use the app for something personal	That is fine. It holds more than one account.
I do not have my phone	Contact us. We can give you a temporary pass to sign in once.

← All guides

Set Up Microsoft Authenticator

Android  |  About 5 minutes

What this is for. Microsoft is switching off sign-in codes sent by text message on 1 February 2027. The Microsoft Authenticator app replaces them. It is quicker, and much safer.

You will need: your Android phone, and a computer.

1Install the app

1. On your phone, tap or type this link: aka.ms/authapp
2. Install Microsoft Authenticator.
3. Already have it? Check for an update and install it.

2Open your security settings

1. On your computer, go to mysignins.microsoft.com/security-info
2. Sign in with your work email address.
3. Click Add sign-in method.
4. Choose Microsoft Authenticator.
5. Click Next on the screens that follow.
6. A square QR code appears. Leave it on screen.

3Scan the code

1. Open Microsoft Authenticator on your phone.
2. Tap the + at the top.
3. Tap Work or school account.
4. Tap Scan a QR code.
5. Tap Allow if it asks to use your camera.
6. Point your phone at the QR code on your computer.

4Say yes to notifications

Tapped the wrong one? Go to Settings → Apps → Authenticator → Notifications and turn them on.

5Finish the test

1. Your computer shows a two-digit number.
2. A notification appears on your phone. Tap it.
3. Type the number into the app.
4. Tap Yes.

If something goes wrongopen

Problem	What to do
Notifications arrive late, or not at all	Android may be saving battery by pausing the app. Go to Settings → Apps → Authenticator → Battery and set it to Unrestricted. This is common on Samsung phones.
Nothing happens when I sign in	Check notifications are turned on: Settings → Apps → Authenticator → Notifications.
The QR code will not scan	Turn your screen brightness up. If it has been on screen a while, start again from Step 2.
I cannot see “Work or school account”	Your app needs updating. Go back to Step 1.
I do not have my phone	Contact us. We can give you a temporary pass to sign in once.

← All guides

Make Microsoft Authenticator Your Default

If you already sign in with a text message  |  About 3 minutes

What this is for. If you already receive a code by text message when you sign in, you can keep that for now — but it is worth adding the Microsoft Authenticator app and making it your default.

1Add the app first

If you have not already installed and set up Microsoft Authenticator, do that first. Use the guide for your phone:

• Set up Microsoft Authenticator — iPhone
• Set up Microsoft Authenticator — Android

You will be asked to verify yourself part way through. That is normal — use your usual text message code. It only happens this once.

2Change your default

1. On your computer, go to mysignins.microsoft.com/security-info
2. Sign in with your work email address.
3. Near the top you will see Default sign-in method.
4. Click Change next to it.
5. Choose the Microsoft Authenticator option. Depending on how your account is set up, this reads either Microsoft Authenticator — notification or App based authentication or hardware token — code. Either is correct.
6. Click Confirm.

Should I delete my phone number?

No — leave it there for now. Keeping your phone number as a backup means you are not stuck if something goes wrong with the app. We will let you know when it is time to remove it.

If something goes wrongopen

Problem	What to do
I cannot see “Default sign-in method”	You may need to scroll up. It sits above the list of your sign-in methods.
Microsoft Authenticator is not in the list	The app has not been added to your account yet. Go back to Step 1.
I still get text messages	Sign out completely and back in again. If it continues, contact us.
I have a new phone	See the Getting a New Phone guide.

← All guides

Register Your Phone for Work Access

iPhone or Android  |  About 3 minutes

What this is for. Registering your phone lets you use work email, Teams and OneDrive on it. Without it, those apps may refuse to sign in or keep asking you to try again.

You will need: Microsoft Authenticator already set up on your phone. If you have not done that yet, do it first.

1You may already be done

If you have added your work email to Outlook on your phone and it is working, your phone is probably registered already. Check first:

1. Open Microsoft Authenticator.
2. Tap the three lines (☰) in the top left corner.
3. Tap Settings.
4. Look for Device Registration.

If it already shows your work email address, there is nothing more to do.

2How to register

1. Open Microsoft Authenticator.
2. Tap the three lines (☰) in the top left corner.
3. Tap Settings.
4. Tap Device Registration.
5. Tap Register your device.
6. Sign in with your work email address and password.
7. Approve the sign-in when your phone asks.

What we can and cannot see

This is the question we get asked most, so here is a straight answer.

• We can see: the make and model of your phone, which version of its operating system it runs, and that it is registered.
• We cannot see: your photos, your personal messages, your browsing, your apps, or your call history.
• If you leave, or your phone is lost: we can remove access to work email and files. We cannot wipe your personal data.

If something goes wrongopen

Problem	What to do
I cannot find Device Registration	Update Microsoft Authenticator in the App Store or Google Play, then look again. The menu has moved between versions.
It says my device is already registered to a different account	Contact us. This usually happens after changing jobs or phones.
Outlook or Teams still will not sign in	Close the app completely and open it again. If it still fails, contact us.
It asks me to install another app	That is normal for some organisations. Follow the prompts, or contact us if you are unsure.
I am using a personal phone and would rather not	Talk to us. There may be another way to get you what you need.

← All guides

Set Up a Passkey

iPhone or Android  |  About 5 minutes

What this is for. A passkey lets you sign in with your face or fingerprint. There is no code to type at all.

It is also the safest option available. A passkey only works on the real Microsoft sign-in page. If you were ever tricked onto a fake one, it simply would not work — so it cannot be stolen the way a code can.

You will need: Microsoft Authenticator already set up on your phone. If you have not done that yet, do it first.

1Check your app is up to date

1. On your phone, tap or type this link: aka.ms/authapp
2. If an update is offered, install it.

2Start the setup

1. On your computer, go to mysignins.microsoft.com/security-info
2. Sign in with your work email address.
3. Click Add sign-in method.
4. Choose Passkey in Microsoft Authenticator.

3Confirm on your phone

1. Follow the instructions on screen.
2. When your phone asks, confirm with your face, fingerprint or phone PIN.
3. Give the passkey a name you will recognise, such as My iPhone.

If your password manager pops up

Your password manager may offer to save the passkey for you. It appears in its own window, separate from the Microsoft one. Close it without saving.

Your password manager already holds your password. If it holds your passkey too, then everything needed to get into your account sits in one place — which defeats the point. Just close the pop-up and carry on with the Microsoft window behind it.

Already saved one there by mistake? Nothing is broken, but please let us know so we can tidy it up.

If something goes wrongopen

Problem	What to do
“Passkey in Microsoft Authenticator” is not in the list	Your app needs updating. Go back to Step 1.
I picked the wrong option and got lost	Close the window and start again from Step 2.
I use a Mac	Macs work differently. See Set Up a Passkey on Your Computer, which covers Mac.
It saved somewhere unexpected	Not a problem. Let us know and we will sort it out.

← All guides

Set Up a Passkey on Your Computer

Windows and Mac  |  About 3 minutes

What this is for. This adds a second way to sign in, using your computer instead of your phone. You sign in with your face, your fingerprint, or a PIN. There is no code to type.

1Check first — you may already have this

Most work computers are already connected to your organisation, and Windows sets this up as part of that. To be sure, take ten seconds to check:

1. Click Start, then Settings.
2. Click Accounts.
3. Click Access work or school.
4. Look for a line saying Connected to your organisation’s Microsoft Entra ID.

Want to add your face or fingerprint as well? If your computer supports it, you can add those alongside your PIN using the Windows steps below. It is optional — the PIN alone is enough.

You will need: your work computer. Use the one you work on every day.

2Windows

On Windows this is called Windows Hello.

1. Click Start, then Settings.
2. Click Accounts.
3. Click Sign-in options.
4. Pick one:
   • Facial recognition — if your computer has a Windows Hello camera
   • Fingerprint — if it has a fingerprint reader
   • PIN — works on any computer
5. Click Set up and follow the instructions.

You may see a message saying your organisation requires Windows Hello. That is expected — click OK and carry on.

Then you can save passkeys on this computer

Once your PIN is set, Windows can store passkeys. You will find them under Settings → Accounts → Passkeys.

When you create a passkey for your work account, Windows asks where to keep it.

3Mac

On a Mac you create a passkey that unlocks with Touch ID. You get a choice of where to keep it, and both options work.

1. Go to mysignins.microsoft.com/security-info
2. Sign in with your work email address.
3. Click Add sign-in method.
4. Choose Passkey.
5. When your Mac asks where to save it, pick either on this Mac or iCloud Keychain — see the table above.
6. Confirm with Touch ID.
7. Name it after the computer, for example My MacBook.

If you already have another passkey and sign-in offers the wrong one, look for Other options or Try another way on the sign-in screen and choose the one you want. Having several passkeys is fine — you just occasionally need to tell it which to use.

If something goes wrongopen

Problem	What to do
Windows: the options are greyed out	Contact us. Your computer may need a setting changed first.
Windows: face or fingerprint is missing	Your computer does not have the hardware. Use a PIN instead — it works just as well.
Mac: it saved somewhere unexpected	Not a problem. Let us know and we will tidy it up.
Mac: Touch ID is not offered	Older Macs may not support this. Contact us and we will sort out another option.
Mac: it keeps asking for a security key I do not have	Another passkey is being offered instead of yours. Choose Other options on the sign-in screen, or contact us and we will tidy up the old one.
I share this computer with someone	Contact us before setting this up.
This is not a work computer	Contact us. We only set this up on computers we manage.

← All guides

Getting a New Phone

What to do before and after you swap  |  About 5 minutes

1The easy way — while you still have the old phone

1. Set up Microsoft Authenticator on your new phone, following the normal guide.
2. If you use a passkey, set that up on the new phone too.
3. Check it works — sign out of your work account on a computer, then sign back in using the new phone.
4. Only then wipe or hand back the old phone.

2If the old phone has already gone

You are not locked out permanently. Try these in order.

First — sign in from your computer

If you sign in to your work computer with a PIN, face or fingerprint, use that to sign in as normal. Then add Microsoft Authenticator to your new phone from mysignins.microsoft.com/security-info. This is the quickest route, and it needs no help from us.

Then — contact us

If your phone was your only way in, contact the Anvil helpdesk. We will give you a temporary pass — a code that lets you sign in once, so you can set up your new phone straight away. We will need to check who you are first, so please call rather than email if you can.

3Tidy up afterwards

Once your new phone is working, remove the old one so it cannot be used.

1. Go to mysignins.microsoft.com/security-info
2. Find the entry for your old phone.
3. Click Delete.

Common questionsopen

Question	Answer
Does my iCloud or Google backup restore it?	No. Work accounts are not included, even if the app itself reappears with your account name showing. You still have to set it up again.
Can I have both phones set up at once?	Yes, and that is the easiest way to change over.
I only changed my SIM, not the phone	Nothing to do. This is linked to the phone, not the number.
I have the same phone but reset it	Treat it as a new phone and set it up again.
Do I need to register the new phone as well?	Yes, if you use work email, Teams or OneDrive on it. See Register Your Phone for Work Access.

← All guides

Notifications Not Working

iPhone and Android  |  About 2 minutes

The usual cause. You set up Microsoft Authenticator, you try to sign in, and nothing happens on your phone. Nine times out of ten the app has not been given permission to send notifications. Below is how to fix it.

1First, check the obvious

• Is your phone on and unlocked?
• Is it connected to Wi-Fi or mobile data? The app needs a connection to receive the request.
• Is your phone in Do Not Disturb or Focus mode? That can hold the notification back.

2iPhone — turn notifications on

1. Open Settings.
2. Scroll down and tap Authenticator.
3. Tap Notifications.
4. Turn on Allow Notifications.
5. Make sure Lock Screen, Notification Centre and Banners are all ticked.

3Android — turn notifications on

1. Open Settings.
2. Tap Apps, then Authenticator.
3. Tap Notifications and turn them on.

4Android — if notifications arrive late, or only sometimes

This one catches a lot of people, especially on Samsung phones. Android saves battery by pausing apps it thinks you are not using. That can delay a sign-in request by minutes, or stop it arriving at all.

1. Open Settings.
2. Tap Apps, then Authenticator.
3. Tap Battery.
4. Choose Unrestricted.

On some phones this is called Allow background activity or Do not optimise. If you cannot find it, contact us and we will talk you through it.

Still nothing?open

What is happening	What to do
The app opens, but my work account is not listed	Setup did not finish. Start again with the setup guide for your phone.
I get the notification but tapping it does nothing	Close the app fully and reopen it. If that fails, update it from the App Store or Google Play.
It says the request expired	They only last a minute or two. Try signing in again and approve it promptly.
I have a new phone	Your work account does not move across by itself. See the Getting a New Phone guide.
Nothing above helps	Contact us. We can check from our side and give you a temporary pass to get in meanwhile.