Multi-factor authentication, or MFA, means signing in takes two things: your password and something only you have, usually your phone. If someone steals your password, they still can’t get into your email. It takes about five minutes to set up.
What you’ll need
- your work email address and password
- your smartphone, with internet access
- a computer to follow the steps on
Set it up
The easiest way is to follow the prompt Microsoft shows you after signing in.
- On your computer, sign in to your work account, for example at office.com. When Microsoft says it needs more information, select Next. The Keep your account secure screen opens, with the Authenticator app as the first step.
- Select Download now, or install Microsoft Authenticator from the App Store (iPhone) or Google Play (Android). Then go back to your computer and select Next.
- On your phone, open the app. Allow notifications if it asks.
- In the app, tap + (or the three dots in the top-right corner), then Add account, then Work or school account. Allow camera access if asked, so the app can scan the code.
- On your computer, select Next until you see Scan the QR code. Hold your phone up to the screen and scan the code.
- If the code won’t scan, select Can’t scan the QR image and type in the code and web address shown.
- Select Next. Microsoft sends a test notification to your phone. Open it and tap Approve. If the sign-in screen shows a two-digit number, type that number into the app when it asks.
- Back on the computer, select Next. You’ll see a Success message. You may then be asked to add your mobile number as a backup. Add it, and select Done.
If you weren’t prompted, go to mysignins.microsoft.com/security-info, sign in, select Add sign-in method, and choose Authenticator app. The steps from there are the same.
From now on
When you sign in on a new device, Microsoft sends a notification to your phone. Open the app and approve it. Only approve sign-ins that you started yourself.
If it doesn’t work
- No notification arrives. Open the Authenticator app and look for the request there. Check that notifications are allowed for the app in your phone’s settings.
- You’re asked for a code you don’t have. Select I can’t use my Microsoft Authenticator app right now (or a similar link) and choose another method, such as a text message to your backup number.
- You have a new phone, or you lost yours. Email us before wiping or replacing the old phone if you can. We’ll help you move to the new one. If the old phone is already gone, we can help you get back in too.
- You get an approval request you didn’t start. Tap Deny, then change your password straight away and tell us.