Microsoft To-Do 2FA Setup with an Authenticator App
Protect your Microsoft To-Do account with two-factor authentication (2FA). Once enabled, signing in also requires a one-time code from your authenticator app — not just your password.
A Microsoft To-Do account often holds work and project data, so 2FA keeps it private. Besides an authenticator app, Microsoft To-Do also offers SMS text codes, phone-call codes, email codes and a proprietary app. An authenticator app (TOTP) is usually the best balance of security and convenience — and it's safer than SMS codes, which can be intercepted through SIM-swap attacks.
2FA methods Microsoft To-Do supports
- SMS text message
- Phone call
- Email code
- Proprietary app
- Authenticator app (TOTP)
- 1
Download Authenticator App - Novaz
Install Authenticator App - Novaz from the App Store on your iPhone or iPad and open it — you'll use it to scan Microsoft To-Do's QR code and generate your 6-digit sign-in codes.
- 2
Sign in to Microsoft To-Do and open your Microsoft To-Do account security settings.
- 3
Turn on two-factor authentication and choose the authenticator-app option.
Look for "Authenticator app", "Authentication app", or "TOTP" rather than SMS.
- 4
Scan the QR code with Authenticator App - Novaz.
Open Authenticator App - Novaz, tap add, and point your camera at the QR code Microsoft To-Do displays. Can't scan? Enter the setup key manually instead.
- 5
Enter the 6-digit code to confirm.
Type the code Authenticator App - Novaz generates to verify and link your Microsoft To-Do account.
- 6
Save a way to recover your account.
If Microsoft To-Do shows backup or recovery codes, store them somewhere safe, away from your phone. If it doesn't, check how Microsoft To-Do recovers accounts (support, an admin, or another sign-in method) before you need it.
Menu names on Microsoft To-Do can change — the official Microsoft To-Do 2FA documentation ↗ always has the exact, current path.
How to recover your Microsoft To-Do account
If you lose access to your authenticator and Microsoft To-Do gave you backup or recovery codes when you turned on 2FA, sign in with one of them; keep them somewhere safe, away from your phone. Not every service issues codes. If Microsoft To-Do doesn't, or you didn't save them, use Microsoft To-Do's account-recovery or support process (or ask your admin, for a work account) to get back in.
Frequently asked questions
- Does Microsoft To-Do work with authenticator apps like Authenticator App - Novaz?
- Yes. Microsoft To-Do supports TOTP authenticator apps, so you can generate its two-factor codes in Authenticator App - Novaz.
- Is Microsoft To-Do two-factor authentication free?
- Yes. Enabling authenticator-app 2FA on Microsoft To-Do is free — you only need the free Authenticator App - Novaz.
- What if I lose access to my Microsoft To-Do 2FA codes?
- If Microsoft To-Do gave you backup or recovery codes during setup, sign in with one of them. If it didn't, or you didn't save them, use Microsoft To-Do's account recovery or contact its support (or your admin, for a work account), then add the account to Authenticator App - Novaz again.
Generate your Microsoft To-Do codes in Authenticator App - Novaz
Free, offline, and encrypted. One tap for every 6-digit code.
Get the appMore Productivity guides
Novaz is not affiliated with, endorsed by, or sponsored by Microsoft To-Do. Microsoft To-Do and its logo are trademarks of their respective owner and are used here for identification only.


