Set up your Microsoft 365 sign-in for multi-factor authentication

Set up your Microsoft 365 sign-in for multi-factor authentication

Once your admin enables your organization, and your account, for multi-factor authentication (MFA) you have to set up your user account to use it. This should only take a minute or so.

Tip: Want to know more about multi-factor authentication? See What is: Multifactor authentication.

By setting up MFA, you add an extra layer of security to your Microsoft 365 account sign-in. For example, you first enter your password and, when prompted, you also type a dynamically generated verification code provided by an authenticator app or sent to your phone.

  1. Sign in to Microsoft 365 with your work or school account with your password like you normally do. After you choose Sign in, you'll be prompted for more information.

    A dialog box telling you that more information is required to complete your sign-in
  2. Choose Next.
  3. The default authentication method is to use the free Microsoft Authenticator app. If you have it installed on your mobile device, select Next and follow the prompts to add this account. If you don't have it installed there is a link provided to download it.

    If you would rather use SMS messages sent to your phone instead, select I want to set up a different method. Microsoft 365 will ask for your mobile number, then send you an SMS message containing a 6-digit code to verify your device.
     

Tip: For a faster, and more secure, experience we recommend using an authenticator app rather than SMS verification.

  1. Once you complete the instructions to specify your additional verification method, the next time you sign in to Microsoft 365, you'll be prompted to provide the additional verification information or action, such as typing the verification code provided by your authenticator app or sent to you by text message.
     

Note: Generally you'll only need the additional verification method the first time you sign into a new app or device, or after you've changed your password. You probably won't be asked for the additional verification code on a daily basis, unless your organization requires it.

If you have applications that don't support multi-factor verification, you must set up an app password.


    • Related Articles

    • Create app passwords from the Security info page

      Certain apps, such as Outlook 2010, don't support two-step verification. This lack of support means that if you're using two-step verification in your organization, the app won't work. To get around this problem, you can create an auto-generated ...
    • How to sign in to Outlook on the web

      Outlook on the web is the web-based version of Outlook used by organizations and it's what you use to access the email, calendar, and contacts associated with your work or school account via a web browser. Your work or school account is typically ...
    • Schedule a meeting in Microsoft Teams

      Stay in sync with scheduled Teams meetings, where you can collaborate with your team, present content, and much more. When you schedule a meeting in Teams, it'll automatically appear in your Outlook calendar, and vice versa. Scheduling from Outlook? ...
    • I can't send or receive messages in New Outlook

      If you see messages piling up in your Outlook outbox or people you're sending messages to aren't receiving them, try the following methods to fix the issue. We've presented the methods in order of quickest to most in-depth We recommend trying the ...
    • Send automatic replies (out of office) from Classic Outlook

      Use automatic (Out of Office) replies from Outlook to tell people you won't be responding right away to their email messages. Determine email account type There are two ways to send automatic out-of-office replies in classic Outlook. The way you do ...