Microsoft Security | Microsoft Authenticator
A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
Is Microsoft Authenticator on iOS FIPS-compliant?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(211.20000000000002, 86%, 30%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EIY%3C/text%3E%3C/svg%3E)
Ian Ynda-Hummel
0
Reputation points
I see the claim that Microsoft Authenticator on iOS is FIPS-compliant, but it says it is compliant by relying on Apple's underlying corecrypto module, for which I can't find a valid certification beyond iOS 15 for user space, though the crypto module at the kernel level seems to be valid for iOS 16. Is there something I'm missing? The Android app seems to use wolfSSL, which does have a valid certification I was able to find.
Microsoft Security | Microsoft Authenticator
Sign in to answer