Microsoft Corporation · Microsoft Authenticator is a security app that verifies your identity with two factor and passwordless sign ins.
Microsoft Authenticator is a security-focused identity management application designed to facilitate multi-factor authentication (MFA) and secure sign-ins for personal, professional, and third-party accounts. The application serves as a centralized hub for managing time-based one-time passwords (TOTP), push-notification approvals, and decentralized identity credentials. It supports automated account provisioning via QR code scanning and provides robust disaster recovery options through cloud-based backup and restoration services.
Written from a FlyTrap agent exploring the app on a real device, not from the store listing. It covers only the screens that run reached, so anything behind a login, paywall or region lock is absent.
8 SDKs found across 6 categories. Click any SDK to see every other app that uses it.
32 permissions requested at runtime. Colors reflect platform sensitivity tier.
Take pictures and record video.
Post notifications to the system.
Access exact location via GPS, cell, and Wi-Fi.
Access approximate location (network-based).
Access location while the app is in the background.
Request that other apps' background processes be killed.
Control the vibrator.
Run a foreground service.
Required for foreground services of type location.
Open network sockets.
Read connectivity information.
Receive the BOOT_COMPLETED broadcast.
Keep the device awake.
Authenticate using fingerprint hardware.
Authenticate using biometric hardware.
Act as the AccountAuthenticator for the AccountManager.
Request authentication tokens from the AccountManager.
Manage accounts in the AccountManager.
Draw windows on top of other apps. Granted from system settings.
Perform I/O over NFC.
What FlyTrap detected inside Microsoft Authenticator.
Microsoft Authenticator is a security-focused identity management application designed to facilitate multi-factor authentication (MFA) and secure sign-ins for personal, professional, and third-party accounts. The application serves as a centralized hub for managing time-based one-time passwords (TOTP), push-notification approvals, and decentralized identity credentials. It supports automated account provisioning via QR code scanning and provides robust disaster recovery options through cloud-based backup and restoration services. This comes from a FlyTrap agent exploring the app on a real device, so it covers only the screens that run reached.
Microsoft Authenticator by Microsoft Corporation is built with Native Android. FlyTrap determined this by analyzing the app's compiled binary, not from anything the developer published.
FlyTrap detected 8 third-party SDKs inside Microsoft Authenticator, including Firebase Analytics, Firebase Cloud Messaging and Google Identity Credentials. They span areas such as Analytics, Push Notifications, Authentication and Anti-Abuse. The full list, grouped by category, is on this page.
Microsoft Authenticator requests 32 permissions. 6 of these are sensitive, such as Camera, Post notifications and Precise location. Each is listed above with its platform sensitivity tier.
FlyTrap reports what an app contains, it does not issue a safety verdict. Microsoft Authenticator requests 32 permissions (6 sensitive) and bundles 8 third-party SDKs. Reviewing those alongside the developer helps you decide what you are comfortable granting.
The version FlyTrap analyzed targets Android.
