Seitfin Right‑Sized IT

How to Set Up Microsoft Multi‑Factor Authentication (MFA)

Cybersecurity threats are increasing every year, and passwords alone are no longer enough to protect user accounts. Microsoft Multi‑Factor Authentication (MFA) adds an essential extra layer of security by requiring users to verify their identity using more than just a password. 

This article explains what Microsoft MFA is, why it is important, and how to set it up using the Microsoft Authenticator app. 

What Is Microsoft Multi‑Factor Authentication?

Microsoft Multi‑Factor Authentication is a security feature that requires two or more verification methods when signing in to a Microsoft account. These methods typically include: 

  • Something you know – your password 
  • Something you have – a mobile phone or authenticator app 
  • Something you are – biometric verification such as a fingerprint or face recognition 

Even if a password is compromised, MFA helps prevent unauthorised access by ensuring attackers cannot sign in without the second factor.

Why MFA Is Important

Implementing MFA significantly improves account security and reduces the risk of cyberattacks such as phishing, password spraying, and brute‑force attacks. Key benefits include: 

  • Stronger protection for Microsoft 365, Azure, and business applications 
  • Reduced risk of data breaches 
  • Improved compliance with security standards and best practices 
  • Peace of mind for users and administrators 

For organisations, MFA is one of the most effective and easiest security measures to deploy.

What You Need Before You Start

Before setting up Microsoft MFA, ensure you have the following: 

  • A Microsoft work or school account 
  • A smartphone (Android or iOS) 
  • Internet access 
  • Permission to set up MFA (enabled by your organisation’s IT administrator) 

The recommended verification method is the Microsoft Authenticator app, which is free and easy to use. 

Step‑by‑Step: Setting Up Microsoft MFA

Step 1: Install the Microsoft Authenticator App

  1. On your mobile phone, open the App Store (iPhone) or Google Play Store (Android).
  2. Search for Microsoft Authenticator. 
  3. Download and install the app. 

 Once installed, open the app and allow notifications when prompted. Notifications are required for approval requests. 

Step 2: Sign In to Your Microsoft Account

  1. Go to https://mysignins.microsoft.com/security-info 
  2. Sign in using your work or school email address and password. 
  3. You may be prompted to approve a sign‑in request. 
  4. Open the Microsoft Authenticator app on your phone and approve the request by entering the number displayed on your screen. 

 If MFA is required, you will be prompted to begin the setup process automatically. 

Step 3: Choose the Microsoft Authenticator App

  1. When asked to choose a verification method, select Authenticator app. 
  2. Click Add or Next to continue. 

 Microsoft may suggest the Authenticator app as the default option because it provides the best balance of security and convenience. 

Step 4: Connect the App to Your Account

  1. On your computer, a QR code will appear. 
  2. In the Authenticator app, tap Add account. 
  3. Select Work or school account. 
  4. Scan the QR code displayed on your screen. 

 This links your Microsoft account to the Authenticator app.

Step 5: Approve a Test Sign‑In

After scanning the QR code, Microsoft will send a test notification to your phone. 

  1. Check your phone for the notification. 
  2. Open the Authenticator app. 
  3. Enter the number displayed on the screen. 
  4. Tap Approve 

 If the test is successful, MFA is now configured. 

Step 6: Add a Backup Verification Method (Recommended)

To avoid being locked out, Microsoft strongly recommends adding a backup method, such as: 

  • A mobile phone number (SMS or call) 
  • A secondary authenticator app 
  • A hardware security key (if supported) 

 To add a backup method: 

  1. Go to Security Info. 
  1. Select Add method. 
  1. Follow the on‑screen instructions. 

What to Expect When Signing In

Once MFA is enabled, you will: 

  • Enter your password as usual 
  • Receive a push notification on your phone 
  • Approve the sign‑in request in the Authenticator app 

In some cases, you may be asked to enter a number shown on your screen to confirm the sign‑in, adding an extra layer of protection. 

 

Common Issues and Tips

  • No notification received: Check that notifications are enabled and your phone has internet access. 
  • New phone: Set up MFA again on the new device before removing the old one. 
  • Lost phone: Contact your IT administrator immediately to reset MFA. 

 Keeping your contact details and backup methods up to date is essential. 

Conclusion

Microsoft Multi‑Factor Authentication is a simple yet powerful way to protect user accounts and organisational data. By combining passwords with an additional verification step, MFA dramatically reduces the risk of unauthorised access. 

Setting up MFA using the Microsoft Authenticator app takes only a few minutes and provides long‑term security benefits for both individuals and organisations. If you have not enabled MFA yet, it is highly recommended to do so as soon as possible. 

Scroll to Top