How to Configure Microsoft Authenticator for WordPress Push Authentication
Question details
The user wants to configure Microsoft Authenticator to receive push notifications for WordPress logins, rather than relying solely on time-based one-time passwords (TOTP) or using the Authy application.
- Product
- Microsoft Authenticator / WordPress
- Device & OS
- not provided
- Scenario
- Setting up two-factor authentication (2FA) on a WordPress website using a security plugin.
- Observed behavior
- The WordPress security plugin allows TOTP generation via Microsoft Authenticator, but restricts push notification capabilities specifically to the Authy application.
Before modifying your WordPress authentication settings, ensure you have an active secondary administrator account or have downloaded backup recovery codes to prevent accidental lockouts.
Use Standard TOTP Authentication with Microsoft Authenticator
While Authy-specific push notifications are not natively supported, you can safely use Microsoft Authenticator as your primary TOTP generator for WordPress.
Push notifications require direct API integration between the WordPress plugin and the authentication provider. Because some plugins hardcode Authy for push requests, Microsoft Authenticator can only provide 6-digit codes via standard TOTP protocol in these specific environments.
Log into your WordPress dashboard as an administrator and navigate to your active security or 2FA plugin settings.
Choose the generic 'Time-Based One-Time Password (TOTP)' or 'Other Authenticator App' enrollment option to generate a QR code.
Open the Microsoft Authenticator app on your phone, tap the '+' icon in the top right, select 'Other (Google, Facebook, etc.)', and scan the WordPress QR code.
Enter the 6-digit code generated by the app into your WordPress security settings to verify the connection and save your changes.
Verify Native Push Support in Enterprise Plugins
Certain premium WordPress plugins support Microsoft Entra ID (formerly Azure AD), which enables native Microsoft Authenticator push notifications.
Switch to WPS Office for Seamless Content Creation
While resolving your WordPress authentication setup, you need a reliable suite for drafting and organizing your website content. WPS Office is a free, lightweight, and highly compatible alternative to Microsoft Office that helps you work faster.
- 1. Download the Installer: Visit the official WPS Office website and download the free installation package for your operating system.
- 2. Install the Suite: Run the installer and follow the on-screen prompts to set up WPS Office on your device.
- 3. Start Drafting Content: Open WPS Writer to begin drafting your WordPress posts with advanced formatting tools and full Microsoft Office compatibility.
Frequently Asked Questions
Why does my WordPress security plugin ask for Authy instead of Microsoft Authenticator?
Some WordPress plugins use proprietary APIs provided by Twilio (Authy's parent company) specifically to handle push notifications. Standard authenticator apps like Microsoft Authenticator use the open TOTP protocol, which provides 6-digit codes but cannot process Authy's proprietary push alerts.
Can I use both Authy and Microsoft Authenticator for my WordPress site?
Yes, if your security plugin supports multiple authentication methods, you can configure Authy for push notifications and simultaneously register Microsoft Authenticator as a backup method using the generic TOTP QR code.
What should I do before changing my WordPress authenticator app?
Always generate and save backup recovery codes, or ensure you have a secondary administrator account active. Never delete your old authenticator configuration from the app or WordPress until you have successfully tested the new login method.
Does Microsoft Authenticator support standard WordPress 2FA plugins like Wordfence?
Yes, Microsoft Authenticator fully supports standard 2FA plugins (like Wordfence, WP 2FA, or Solid Security) by scanning the provided QR code to generate standard 6-digit time-based passwords.
