Microsoft 验证器应用常见问题Microsoft Authenticator app FAQ

本文解答了有关 Microsoft Authenticator 应用的常见问题。This article answers common questions about the Microsoft Authenticator app. 如果问题在此处没有解答,请访问 Microsoft 验证器应用论坛If you don't see an answer to your question, go to the Microsoft Authenticator app forum.

Microsoft Authenticator 应用替代了 Azure Authenticator 应用,建议使用 Azure Multi-Factor Authentication 时使用该应用。The Microsoft Authenticator app replaced the Azure Authenticator app, and is the recommended app when you use Azure Multi-Factor Authentication. Microsoft Authenticator 应用适用于 AndroidiOSWindows PhoneThe Microsoft Authenticator app is available for Android, iOS, and Windows Phone.

常见问题Frequently asked questions

问题Question 解决方案Solution
哪些数据是 Authenticator 以我的名义存储的,我如何删除它?What data does the Authenticator store on my behalf and how can I delete it? Microsoft Authenticator 应用收集三种类型的信息:The Microsoft Authenticator app collects three types of information:
  • 你在添加帐户时提供的帐户信息。Account info you provide when you add your account. 可以通过删除帐户删除此数据。This data can be removed by removing your account.
  • 诊断日志数据,该数据仅驻留在应用中,直到你通过应用的“帮助”菜单选择“发送日志”来将日志发送到 Microsoft。Diagnostic log data, which resides only in the app until you choose to Send Logs to Microsoft through the app's Help menu. 这些日志文件包含诸如你的电子邮件地址(例如 alain@contoso.com)、服务器/IP 地址和设备数据(例如设备名称和操作系统版本)之类的个人数据,以及仅限用于帮助解决应用问题的个人数据。These log files contain personal data, like your email addresses (such as, alain@contoso.com), server/IP addresses, and device data (such as, device name and operating system version), with the personal data limited to info necessary to help troubleshoot app issues. 任何时候都可以在应用中查看这些日志文件来查看所收集的信息。You can view these log files in the app at any time to see the info being gathered. 如果你发送日志文件,则身份验证应用工程师可以使用它来解决客户报告的问题。If you send the log files, the Authentication app engineers can use it to troubleshoot customer-reported issues.
  • 非个人识别使用情况数据,例如“已启动添加帐户流/已成功添加了帐户”或者“通知已批准”。Non-personally identifiable usage data, such “started add account flow/successfully added account,” or “notification approved.” 此数据是我们的工程决策不可或缺的一部分,并帮助我们确定哪些功能对你很重要,以及什么地方需要以应用更新的形式进行改进。This data is an integral part of our engineering decisions and helps us determine what features are important to you, and where improvements need to be made in the form of updates to the apps. 应用用户在首次启动应用时会看到有关此数据收集的通知,并且系统会告知用户可以在应用的“设置”页面上关闭此数据收集。You, as an app user, see a notification of this data collection on first launch of the app, and are informed that it can be turned off on the app’s Settings page. 可以在任何时候启用或禁用此设置。You can enable or disable this setting at any time.
此应用中的代码有哪些用途?What are the codes in the app for? 打开 Microsoft Authenticator 应用时,会看到已添加的帐户,它们以带有六位数或八位数编号的磁贴形式显示。When you open the Microsoft Authenticator app, you'll see your added accounts as tiles with a six- or eight-digit number for each.

你将使用这些代码来验证自己声明的身份。You'll use these codes as verification that you are who you say you are. 使用用户名和密码登录后,需要键入帐户磁贴中显示相同的验证码。After you sign in with your username and password, you'll type in the verification code that's in the same tile as your account. 例如,如果以 Alain 的身份登录到 Contoso 帐户,应使用验证码 427303。For example, if you're Alain signing in to your Contoso account, you'd use the verification code, 427303.

应用中的“帐户”屏幕
为何代码旁边的数字不断地倒计数?Why does the number next to the code keep counting down? 活动验证码的旁边可能会出现 30 秒倒计时。You might see a 30-second timer counting down next to your active verification code. 此计时器可防止使用同一代码登录两次。This timer is so that you never sign in using the same code twice. 与密码不同,你不需要记住此数字。Unlike a password, we don't want you to remember this number. 此机制确保只有有权访问你手机的人才知道验证码。The idea is that only someone with access to your phone knows your code.
帐户磁贴为何灰显?Why is my account tile gray? 某些组织要求 Microsoft Authenticator 应用使用单一登录并保护组织资源。Some organizations require the Microsoft Authenticator app to work with single sign-on and to protect organizational resources. 在此情况下,该帐户不会用于双重验证,并且灰显或处于非活动状态。In this situation, the account isn't used for two-step verification and shows up as gray or inactive. 此类帐户往往称为“代理”帐户。This type of account is frequently called a "broker" account.
是否需要连接到 Internet 或网络才能获取和使用验证码?Do I need to be connected to the Internet or my network to get and use the verification codes? 无需连接到 Internet 或数据网络即可获取验证码,因此,无需手机服务即可登录。The codes don't require you to be on the Internet or connected to data, so you don't need phone service to sign in. 此外,应用在关闭后会停止运行,因为不会耗尽电池。Additionally, because the app stops running as soon as you close it, it won't drain your battery.
仅当应用处于打开状态时才会收到通知。I only get notifications when the app is open. 如果应用关闭,则无法收到通知。If the app is closed, I don't get notifications. 如果接收的是通知而不是警报,则即使打开了铃声,也应该检查应用设置。If you're getting notifications, but not an alert, even with your ringer on, you should check your app settings. 请确保在应用中启用声音或振动通知。Make sure the app is turned on to use sound or to vibrate for notifications. 如果完全收不到通知,应检查是否存在以下情况:If you don't get notifications at all, you should check the following:
  • 手机是否进入“免打扰”或“静音”模式?Is your phone in Do Not Disturb or Quiet mode? 这些模式可能阻止应用发送通知。These modes can prevent apps from sending notifications.
  • 是否能从其他应用收到通知?Can you get notifications from other apps? 如果不能,原因可能是手机出现网络连接问题,或者 Android 或 Apple 的通知通道出现问题。If not, it could be a problem with the network connections on your phone, or the notifications channel from Android or Apple. 可以尝试通过手机设置解决网络连接问题,但可能需要联系服务提供商来帮助解决 Android 或 Apple 通知通道问题。You can try to resolve your network connections through your phone settings, but you might need to talk to your service provider to help with the Android or Apple notifications channel.
  • 是否应用中的某些帐户可以收到通知,而其他帐户则不能?Can you get notifications for some accounts on the app, but not others? 如果是,请从应用中删除有问题的帐户,然后再次添加并允许其发送通知,看看是否能解决问题。If yes, remove the problematic account from your app, add it again allowing notifications, and see if that fixes the problem.
如果尝试了所有这些步骤但仍有问题,我们建议发送日志文件做诊断。If you tried all of these steps and are still having issues, we recommend sending your log files for diagnostics. 打开应用,转到“帮助”并选择“发送日志”。Open the app, go to Help, and then select Send logs. 然后,转到 Microsoft Authenticator 应用论坛告知遇到的问题,以及目前为止已尝试过的步骤。After that, go to the Microsoft Authenticator app forum and let us know what problem you're seeing and what steps you've tried so far.
我在应用中使用了验证码,但如何切换到推送通知?I'm using the verification codes in the app, but how do I switch to the push notifications? 可以针对工作或学校帐户(如果管理员已启用)或个人 Microsoft 帐户设置此方法,但通知不适用于第三方帐户。You can set this up for your work or school account (if turned on by your administrator) or for your personal Microsoft account, but notifications won't work for third-party accounts.

若要将个人帐户切换到通知,必须在帐户中重新注册设备,并设置推送通知。To switch your personal account over to notifications you'll have to re-register your device with the account, setting up push notifications.

组织会决定是否允许工作或学校帐户使用一键式通知,因此,组织可能已禁用此功能。Your organization decides whether to allow one-click notifications for your work or school account, so your organization might turn off this feature.
通知是否适用于非 Microsoft 帐户Do notifications work for non-Microsoft accounts 不适用,通知只适用于 Microsoft 帐户和 Azure Active Directory 帐户。No, notifications only work with Microsoft accounts and Azure Active Directory accounts. 如果工作单位或学校使用的是 Azure AD 帐户,则可能会禁用此功能。If your work or school uses Azure AD accounts, they might turn off this feature.
我购买了新的设备,或者从备份还原了我的设备。I got a new device or restored my device from a backup. 如何再次在 Microsoft Authenticator 应用中设置我的帐户?How do I set up my accounts in the Microsoft Authenticator app again? 如果运行 iOS 设备,已启用“自动备份”,并且在旧设备上创建了帐户的备份,则可以使用该备份在新设备上恢复帐户凭据。If you’re running an iOS device, have turned on Auto Backup, and have created a backup of your accounts on your old device; you can use that backup to recover your account credentials on your new device. 有关详细信息,请参阅使用 Microsoft Authenticator 应用备份和恢复帐户凭据一文。For more info, see the Backup and recover account credentials with the Microsoft Authenticator app article.
如何从应用删除帐户?How do I remove an account from the app?
  • iOS。iOS. 在主屏幕中,依次选择菜单按钮、“编辑帐户”。From the main screen, select the menu button, then select Edit accounts. 依次点击帐户名旁边的红色图标、“删除帐户”。Tap the red icon next to the account name, and tap Remove Account.
  • Windows Phone。Windows Phone. 在主屏幕中,依次选择菜单按钮、“编辑帐户”。From the main screen, select the menu button, then Edit accounts. 点击帐户名称旁边的 XTap the X next to the account name.
  • Android。Android. 在主屏幕中,依次选择菜单按钮、“编辑帐户”。From the main screen, select the menu button, then Edit accounts. 点击帐户名称旁边的 XTap the X next to the account name.
如果拥有已注册到组织的设备,可能需要完成一个额外步骤才能删除帐户。If you have a device that is registered with your organization, you may need to complete an extra step to remove your account. 在这些设备上,以设备管理员自动注册了 Microsoft Authenticator 应用。On these devices, the Microsoft Authenticator app is automatically registered as a device administrator. 如果想要彻底卸载应用,需受先在应用设置中取消注册应用。If you want to completely uninstall the app, you need to first unregister the app in the app settings.
应用为什么要请求如此多的权限?Why does the app request so many permissions? 下面是可能需要的权限完整列表及它们在应用中的用法。Here is a full list of permissions that can be asked for, and how they are used in the app. 会出现哪些特定的权限取决于所用的手机类型。The specific permissions you see depend on the type of phone you have.
  • 相机。Camera. 在添加工作、学校或非 Microsoft 帐户时用于扫描 QR 码。Used to scan QR codes when you add a work, school, or non-Microsoft account.
  • 联系人和电话。Contacts and phone. 在使用个人 Microsoft 帐户登录时,用于通过查找手机中的现有帐户来简化过程。Used to simplify the process by finding existing accounts on your phone when you sign in with your personal Microsoft account.
  • 短信。SMS. 用于确保在首次使用个人 Microsoft 帐户登录时,Used to make sure your phone number matches the number on record. 电话号码与记录中的号码匹配。When you sign in with your personal Microsoft account for the first time. 我们会将包含 6-8 位数验证码的短信发送到下载应用的手机。We send a text message to the phone where you downloaded the app that includes a 6-8 digit verification code. 我们不会要求在应用中查找并输入此代码,而是在短信中发送此代码。Instead of asking you to find this code and enter it in the app, it's found in the text message for you.
  • 在其他应用上绘制。Draw over other apps. 身份验证的通知也会显示在可能正运行的其他任何应用上。The notification you get that verifies your identity is also displayed on any other app that might be running.
  • 从 Internet 接收数据。Receive data from the internet. 必须使用此权限发送通知。This permission is required for sending notifications.
  • 防止手机休眠。Prevent phone from sleeping. 如果向组织注册设备,组织可以更改手机上的这项策略。If you register your device with your organization, your organization can change this policy on your phone.
  • 控制振动。Control vibration. 可以选择在收到验证身份的通知时是否希望手机振动。You can choose whether you would like a vibration whenever you receive a notification to verify your identity.
  • 使用指纹硬件。Use fingerprint hardware. 每当验证身份时,某些工作和学校帐户需要其他的 PIN。Some work and school accounts require an additional PIN whenever you verify your identity. 为了使过程更加简单,我们允许使用指纹而不是输入 PIN。To make the process easier, we allow you to use your fingerprint instead of entering the PIN.
  • 查看网络连接。View network connections. 添加 Microsoft 帐户时,应用需要网络/Internet 连接。When you add a Microsoft account, the app requires network/internet connection.
  • 读取存储内容。Read the contents of your storage. 仅当通过应用设置报告技术问题时才使用此权限。This permission is only used when you report a technical problem through the app settings. 会从存储中收集某些信息来诊断问题。Some information from your storage is collected to diagnose the issue.
  • 完全网络访问。Full network access. 必须使用此权限发送通知以验证身份。This permission is required for sending notifications to verify your identity.
  • 启动时运行。Run at startup. 如果重启手机,此权限可确保继续接收通知以验证身份。If you restart your phone, this permission ensures that you continue you receive notifications to verify your identity.
为何 Microsoft Authenticator 应用允许在不解锁设备的情况下批准请求?Why does the Microsoft Authenticator app allow you to approve a request without unlocking the device? 同意验证请求时无需解锁设备,只需证明带了手机。You don't have to unlock your device to approve verification requests because all you need to prove is that you have your phone with you. 双重验证要求提供两项证明:你知道的事和你拥有的物品。Two-step verification requires proving two things - a thing you know, and a thing you have. 只需知道密码。The thing you know is your password. 拥有的物品是手机(已在 Microsoft 验证器应用中经过设置,并已注册为 MFA 证明)。因此,拥有手机和批准请求符合第二个身份验证因素的标准。The thing you have is your phone (set up with the Microsoft Authenticator app and registered as an MFA proof.) Therefore, having the phone and approving the request meets the criteria for the second factor of authentication.
在 Apple Watch 中打开 Microsoft Authenticator 应用时,为何会显示我的所有帐户?Why aren’t all my accounts showing up when I open the Microsoft Authenticator app on my Apple Watch? 在 Apple Watch 伴侣应用中,Microsoft Authenticator 应用仅支持使用 Microsoft 个人帐户或者学校或工作帐户发送推送通知。The Microsoft Authenticator app only supports using Microsoft personal or school or work accounts with push notifications on the Apple Watch companion app. 对于其他帐户,必须在手机上打开 Authenticator 应用才能查看验证码。For your other accounts, you’ll have to open the authenticator app on your phone to view your verification codes.
为何无法在 Apple Watch 上批准或拒绝通知?Why can’t I approve or deny notifications on my Apple Watch? 首先,请确保在 iPhone 上将 Microsoft Authenticator 应用升级到 6.0.0 或更高版本。First, make sure you’ve upgraded to the Microsoft Authenticator app, version 6.0.0 or higher on your iPhone. 然后,在 Apple Watch 上打开 Microsoft Authenticator 伴侣应用,并查看其下面带有“设置”按钮的所有帐户。After that, open the Microsoft Authenticator companion app on your Apple Watch and look for any accounts with a Set Up button beneath them. 必须完成设置过程才能批准这些帐户的通知。You must complete that set up process to approve notifications for those accounts.
我收到 Apple Watch 和手机之间出现通信错误的消息。I’m getting a communication error between the Apple Watch and my phone. 我可以做什么来排除故障?What can I do to troubleshoot? 当 Watch 屏幕在完成与手机通信之前进入睡眠状态时会发生此错误。This error happens when your Watch screen goes to sleep before it finishes communicating with your phone.

如果在安装期间出现这种情况:If this happens during setup:
再次尝试运行安装程序,在完成之前,请确保 Watch 处于待机状态。Try to run setup again, making sure to keep your Watch awake until the process is done. 同时打开手机上的应用,并响应任何出现的提示。At the same time, open the app on your phone and respond to any prompts that appear.

如果手机与 Watch 仍无法通信,可以尝试以下方法:If your phone and Watch still aren’t communicating, you can try the following:
  1. 强制退出 Microsoft Authenticator 手机应用,并在 iPhone 上再次打开它。Force quit the Microsoft Authenticator phone app and open it again on your iPhone.
  2. 在 Apple Watch 上强制退出伴侣应用。Force quit the companion app on your Apple Watch.
    1. 在 Watch 上打开 Microsoft Authenticator 伴侣应用Open the Microsoft Authenticator companion app on your Watch
    2. 按住边侧按钮,直到“关机”屏幕出现。Hold down the side button until the Shutdown screen appears.
    3. 松开边侧按钮,并按住 Digital Crown 强制退出活动的应用。Release the side button and hold down the Digital Crown to force quit the active app.
  3. 关闭手机和 Watch 的蓝牙与 Wi-Fi,然后重新打开。Turn off both Bluetooth and Wi-Fi for both your phone and your Watch, and then turn them back on.
  4. 重启 iPhone 和 Watch。Restart your iPhone and your Watch.
如果试图批准通知时出现这种情况:If this happens when you’re trying to approve a notification:
下次试图批准 Apple Watch 上的通知时,在请求完成并听到表示成功的提示音之前,请保持屏幕处于待机状态。The next time you try to approve a notification on your Apple Watch, keep the screen awake until the request is complete and you hear the sound that indicates it was successful.
为何适用于 Apple Watch 的 Microsoft Authenticator 伴侣应用在手表上不同步或显示?Why isn’t the Microsoft Authenticator companion app for Apple Watch syncing or showing up on my watch? 如果该应用未显示在 Watch 上,请尝试以下方法:If the app isn’t showing up on your Watch, try the following:
  1. 确保 Watch 运行 watchOS 4.0 或更高版本。Make sure your Watch is running watchOS 4.0 or higher.
  2. 再次同步 Watch。Sync your Watch again.
我的 Apple Watch 伴侣应用已崩溃。My Apple Watch companion app crashed. 是否可以向你们发送崩溃日志以便调查?Can I send you my crash logs so you can investigate? 首先,请务必选择与我们共享分析数据。You first have to make sure you’ve chosen to share your analytics with us. 如果你是 TestFlight 用户,则已注册。If you’re a TestFlight user, you’re already signed up. 否则,可以转到“设置”>“隐私”>“分析”,并同时选择“共享 iPhone 和 Watch 分析”和“与应用开发人员共享”选项。Otherwise, you can go to Settings > Privacy > Analytics and select both the Share iPhone & Watch analytics and the Share with App Developers options.

注册后,可以尝试重现崩溃,因此自动将崩溃日志发送给我们进行调查。After you sign up, you can try to reproduce your crash so your crash logs are automatically sent to us for investigation. 但是,如果无法重现崩溃,可以手动复制日志文件并将其发送给我们。However, if you can’t reproduce your crash, you can manually copy your log files and send them to us.
  1. 在手机上打开 Watch 应用,转到“设置”>“通用”,然后单击“复制 Watch 分析数据”。Open the Watch app on your phone, go to Settings > General, and then click Copy Watch Analytics.
  2. 在“设置”>“隐私”>“分析”>“分析数据”下找到相应的崩溃信息,然后手动复制整个文本。Find the corresponding crash under Settings > Privacy > Analytics > Analytics Data, and then manually copy the entire text.
  3. 在手机上打开 Microsoft Authenticator 应用,并将复制的文本粘贴到“发送日志”页上的“与应用开发人员共享”文本框中。Open the Microsoft Authenticator app on your phone and paste that copied text into the Share with App Developers text box on the Send logs page.

后续步骤Next steps