How do I set up two-factor authentication for Microsoft 365 in 1Password?

Two-factor authentication (2FA) means that signing in to Microsoft 365 requires your password plus a one-time code. 1Password can generate and fill that code for you, so you do not need a separate authenticator app.

Only for Microsoft 365 This guide only applies if your company uses Microsoft 365. Not sure? See Does my company use Google or Microsoft?

What you need before you start

  • Your Microsoft 365 email address and password
  • 1Password installed on your device, or the 1Password browser extension

Step 1: Start the 2FA setup in Microsoft 365

  1. Go to mysignins.microsoft.com/security-info and sign in with your work Microsoft 365 account.
  2. Click Add sign-in method and choose Authenticator app.
  3. Microsoft suggests downloading Microsoft Authenticator. Skip this and choose I want to use a different authenticator app.
  4. Follow the prompts until Microsoft shows a QR code. If you cannot scan it, click Can't scan image? to see a secret key instead.

Keep this page open. You need the QR code or secret key in the next step.

You can also get to this page from Microsoft 365: click your profile picture or initials in the top-right corner, select View account, then go to Security info.

Step 2: Add the one-time code to 1Password

  1. Open the 1Password app or the 1Password browser extension.
  2. Open the vault where you want to store your Microsoft 365 login.
  3. Open your Microsoft 365 login and click Edit. If you do not have one yet, click New Item, choose Login, and enter your Microsoft 365 email address and password.
  4. Add a field and choose One-Time Password.
  5. Click the QR code icon in the new field and scan the QR code on the Microsoft page. If you have a secret key instead, paste it into the field.
  6. A six-digit code appears in the field. Click Save.

Step 3: Confirm it works

  1. Go back to the Microsoft 365 setup page in your browser and click Next.
  2. Enter the six-digit code currently shown in your Microsoft 365 login in 1Password.
  3. Click Next to finish the setup.

Microsoft 365 now asks for a code from 1Password when you sign in on a new device. 1Password can fill the code for you, so you do not need to open the app.

Tips

TipWhy it helps
Store your backup codes safelyIf Microsoft gives you backup codes, keep them in a secure place, for example as a secure note in 1Password. You need them if you lose access to 1Password.
Test the code now and thenSign in with the code from 1Password occasionally to make sure it still works.

For more details, see the 1Password guide Use 1Password as an authenticator for sites with two-factor authentication.

What's Next