How to Turn On Two-Factor Authentication (MFA) in Microsoft 365
A stolen password rarely gets an attacker anywhere once two-factor authentication is on: the code on your phone is still missing. It is the highest-return security measure a business can put in place. Here is how to turn it on in Microsoft 365.
Quick answer: To turn on two-factor authentication in Microsoft 365, your administrator first has to enable it for the organization. Each user then sets up a method by going to aka.ms/mfasetup and adding the Microsoft Authenticator app as a verification method.
What is two-factor authentication?
Two-factor authentication (also called two-step verification, or MFA) adds a second proof of identity to the sign-in. After your password, you confirm with a code or a notification on your phone. Even if your password leaks, the account stays closed.
1. The administrator turns on the protection
The first step happens on the administrator side, in the Microsoft 365 admin centre. They enable the protection for the organization, either through security defaults or through Conditional Access policies. Until that is done, users cannot configure a method of their own.
2. Each user sets up a method
Once the protection is on, every employee configures their own verification:
- Go to aka.ms/mfasetup (or the "Security info" page of your account).
- Click Add sign-in method.
- Choose Authenticator app and follow the prompts.
- Scan the QR code with the Microsoft Authenticator app on your phone.
3. Choose the Authenticator app over text messages
Microsoft recommends the Microsoft Authenticator app rather than codes by text message, which are easier to intercept. The app sends a notification you approve with one tap, or shows a one-time code.
Why this matters so much for a small business
Most account break-ins rely on passwords that were stolen or reused somewhere else. Two-factor authentication shuts that attack down on its own. The same is true for your personal accounts: email, banking, social media.
Frequently asked questions
What happens if I change phones?
Before you switch devices, add the new method in your security info, or ask your administrator to reset your verification. Always keep a backup method on file.
Does MFA slow sign-ins down?
Barely. With the Authenticator app you approve a notification and you are in. You can also mark a device as trusted so the prompts come up less often.
Lock down your company accounts
We deploy two-factor authentication and broader security for everyone, individuals and Quebec businesses alike, without pointless friction. Contact OKTO Solutions or take a look at our services.
An article sets out the principle. Putting it in place happens one workstation at a time: our managed cybersecurity service, backup and disaster recovery and our IT services in Montreal.
