A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
If this is a Microsoft Entra work/school account and you're trying to create a device-bound passkey in Microsoft Authenticator on iOS, "Failed to add passkey" is often caused by the iPhone/Authenticator prerequisites, Entra Passkey policy, attestation, or Conditional Access.
For Passkey in Microsoft Authenticator, Microsoft currently requires iOS 17 or later.
Verify:
- iOS 17+
- Latest Microsoft Authenticator
- Face ID/Touch ID or device PIN configured
- Authenticator has the affected work/school account added
- Internet connectivity is working
- Check Entra passkey policy
- Check iOS authenticator AAGUID. This is especially important if you've configured AAGUID restrictions.
Microsoft lists the Authenticator for iOS AAGUID as: 90a3ccdf-635c-4729-a248-9b709135078f
- Check whther you are requiring attestation
- Check Conditional Access
- Register directly from authenticator