Privacy Ratings

Two-factor authentication

Microsoft Authenticator privacy rating

Authenticator app from Microsoft that generates one-time codes for any account and supports push approval, passwordless and passkey sign-in for Microsoft and Entra ID accounts.

United States Five EyesPlatforms: Android · iOS

Summary

Microsoft Authenticator scores 20 out of 100 (grade F) on the two-factor authentication criteria. It meets 1 of 4 criteria: no ads or data sales. It does not meet open source, no trackers or telemetry and independent audit. It is based in the United States: Five Eyes member; subject to the US CLOUD Act.

Score 20 out of 100. How scoring works

Criteria

  • No

    Open source Weight 3 of 3

    Is all the source code needed to run the product public?

    Closed source.

  • No

    No trackers or telemetry Weight 3 of 3

    Are the website and apps free of third-party trackers, with any analytics anonymous and any telemetry off by default?

    The Exodus report finds Google Analytics, Google Firebase Analytics and Microsoft App Center Analytics in the Android app.

    reports.exodus-privacy.eu.org

  • Yes

    No ads or data sales Weight 2 of 3

    Is the product funded without advertising, ad targeting or selling user data?

    Free app with no ads. The Play data safety listing declares data use only for app functionality and security, not advertising.

    play.google.com

  • No

    Independent audit Weight 2 of 3

    Has an independent security or privacy audit been published within the last three years?

    No independent audit is published.

Other two-factor authentication

All 18 two-factor authentication