Enroll with an Authenticator Application

Set up an authenticator app such as Microsoft Authenticator or Google Authenticator as your MFA method and sign in with a 6-digit code.

Published March 19, 2025
Useful resources

How authenticator apps work

An authenticator app on your phone generates one-time codes that change over time (TOTP). At sign-in, you enter the current code displayed in the app.

UserLock works with any TOTP authenticator app, for example:

  • UserLock Push,

  • Microsoft Authenticator,

  • Google Authenticator,

  • LastPass Authenticator,

  • 2FA Authenticator,

  • Duo Mobile,

  • Authy.

User prerequisites

  • A smartphone with a TOTP authenticator app installed.

  • Date and time on your phone set to update automatically. If they’re wrong, UserLock rejects your codes.

  • Your domain credentials.

  • If you already use another MFA method, ask your administrator to reset your MFA configuration first.

Enroll your authenticator app

  1. Sign in with your Windows credentials.

  2. If UserLock asks you to choose a method, select Authenticator App. A QR code appears.

  3. In your authenticator app, add an account and scan the QR code. In Google Authenticator, for example, tap +, then Scan a QR code. If you can’t scan it, enter the key displayed with the QR code.

  4. Enter the 6-digit code displayed in the app, then select Verify and continue.

  5. If UserLock asks you to set up an additional method, follow the on-screen instructions. If you can’t, contact your administrator.

Sign in with your authenticator app

  1. Enter your Windows credentials. The MFA prompt appears.

    Credential provider where the user can input a TOTP code

  2. Open your authenticator app and enter the current code for your UserLock account.

Troubleshooting

“This code is invalid”. Check that the date and time on your phone update automatically, then enter the next code. If the error persists, contact your administrator.

The MFA setup window doesn’t appear. Contact your administrator.

You lost or replaced your phone. Contact your administrator to reset your MFA configuration, then enroll again. If you saved recovery codes, use one to sign in in the meantime.