Microsoft Authenticator

Installing the Microsoft Authenticator app

The Microsoft Authenticator app allows you to verify logins using notifications or generated codes.

1. Download Microsoft Authenticator (iOS 17+, Android 8+):
   • For Android: Google Play
   • For iOS: App Store
2. Install and open the app.

Setting up and connecting the Microsoft Authenticator app to your Microsoft account

1. On your computer:
   • When you sign in to ČVUT systems for the first time, you will be prompted to set up multi-factor authentication (MFA).
   • Sign in using your university account in the format username@cvut.cz and your CTU password.
   • In the on-screen wizard, repeatedly click Next until a unique QR code is generated.
2. In the application:
   • Select Scan QR code. If this option doesn’t appear, tap + in the top right, choose Work or school account, and then select Scan QR code.
   • Scan the code shown on your computer screen.
3. On your computer:
   • Click on “Next” and you will be asked for entering a code from the Microsoft Authenticator application or to confirm a notification in the Microsoft Authenticator.

Setup complete

Once setup is successful, your account will be protected with MFA. Each time you sign in, you will:

• Enter your password.
• Verify access through Microsoft Authenticator (notification or code).

RECOMMENDED: Enable passwordless sign-in in Microsoft Authenticator

Passwordless sign-in is a more secure and convenient alternative to traditional password-based login. Microsoft Authenticator allows you to verify your identity using biometrics (fingerprint, facial recognition) or a PIN directly in the app. During the activation process, your device will be registered with the ČVUT Entra system.

1. On your phone, open the Microsoft Authenticator app.
2. In the app, select your Work or school account.
3. Enable the option Enable phone sign-in
4. The app will guide you through the setup step by step.
   1. During the process, you will be asked to verify your identity:
      1. Enter your PIN or use biometric verification (e.g., fingerprint or face recognition).
      2. The app will confirm that you are the rightful owner of the account.
5. Once the verification process is complete, a confirmation of successful setup will appear.

• Detailed guide
• Guide on Microsoft.com

Enabling Passkey sign-in in Microsoft Authenticator

Passkeys are a modern way of signing in without passwords – using your fingerprint, face, or PIN instead. They are more secure and convenient than traditional passwords.

What will you need?

• A phone with Android 14+ or iOS 17+
• The Microsoft Authenticator app configured

How to set up a Passkey:

1. On your phone, open the Microsoft Authenticator app.
2. In the app, select your Work or school account.
3. Select Create a Passkey
4. If you haven’t already, set up a screen lock on your mobile device!
5. Allow Microsoft Authenticator to be your Passkey provider

• Detailed guide
• Guide on Microsoft.com