Android Phone as Windows Hello Key

TL;DR

Yes, you can use an Android phone as a Windows Hello security key using the Microsoft Authenticator app and Bluetooth. This provides strong two-factor authentication (2FA) for your Microsoft account and other services that support it.

How to Set Up Your Android Phone as a Windows Hello Security Key

1. Install Microsoft Authenticator: Download the Microsoft Authenticator app from the Google Play Store.
2. Add Your Microsoft Account: Open the Authenticator app and select ‘Add account’. Choose ‘Microsoft account’ and follow the on-screen instructions to scan the QR code displayed when you sign in to your Microsoft account online.
3. Enable Two-Factor Authentication (2FA): If you haven’t already, enable 2FA for your Microsoft account through the Microsoft Account security settings. Make sure ‘Authenticator app’ is selected as one of your verification methods.
4. Pair Your Phone via Bluetooth:
   • On your Android phone, ensure Bluetooth is enabled.
   • On your Windows PC, go to Settings > Accounts > Sign-in options.
   • Select ‘Security key’.
   • Click ‘Add security key’.
   • Choose ‘Bluetooth’.
5. Connect in Authenticator: The Windows PC will search for Bluetooth devices. In the Microsoft Authenticator app on your phone, you should receive a notification asking if you want to pair with your PC. Confirm this pairing request.
6. Give Your Key a Name (Optional): You can give your security key a descriptive name in Windows settings. This is helpful if you have multiple keys paired.
7. Test the Connection: Sign out of your Microsoft account and sign back in. When prompted for verification, the Authenticator app on your phone should display a notification asking you to approve the sign-in attempt. Tap ‘Approve’.

Troubleshooting

• Bluetooth Issues: Ensure Bluetooth is enabled on both your Android phone and Windows PC. Try unpairing and re-pairing the devices.
• Authenticator App Not Responding: Close and reopen the Authenticator app. Make sure you have a stable internet connection.
• QR Code Scanning Problems: Ensure good lighting conditions when scanning the QR code. If necessary, manually enter the secret key provided by Microsoft.
• Windows Doesn’t Detect Key: Restart your PC and try again. Check for Windows updates as newer versions may have improved Bluetooth security key support.

Supported Services

Once set up, you can use your Android phone as a security key with any service that supports FIDO2/WebAuthn standards and allows the Microsoft Authenticator app to act as a verification method. This includes:

• Microsoft accounts (Outlook, OneDrive, etc.)
• Other services compatible with FIDO2/WebAuthn through browser extensions or dedicated apps.