Microsoft Authenticator is a mobile app for Android and iOS that adds a second step to account sign-in. It generates one-time codes, lets users approve a sign-in with a tap on the phone, and supports passwordless sign-in to Microsoft personal, work and school accounts as well as other accounts. Approvals are secured with a fingerprint, face recognition or PIN. The app is distributed through the app stores and is used with Microsoft Entra multifactor authentication.
Microsoft Corporation is headquartered in Redmond, Washington, and is subject to US law, including the CLOUD Act. According to Microsoft's documentation, the Entra multifactor authentication service has datacenters in the United States, Europe and Asia Pacific, and push notifications to the app are processed in regional datacenters based on the user's location. Microsoft states that it complies with the EU-U.S. Data Privacy Framework and uses standard contractual clauses for transfers. For European organisations, the app is closely tied to Microsoft's identity services.