How to Set Up 2FA for Microsoft 365

What is MFA?

MFA, or Multi-Factor Authentication, adds an extra layer of security by requiring users to provide two or more verification factors, such as passwords and biometrics to access an account or system.When used with Microsoft 365, it will make it considerably more difficult for hackers or scammers to gain access to user accounts.

What Do I Need To Do?

Once we (Systemagic) have enabled MFA on your Microsoft 365 accounts, you and your colleagues will need to provide extra information to finish the process.

Watch our video guide, or follow the instructions below for the next steps.

https://bit.ly/4ajdyyl

Setting Up MFA

When setting up MFA, we recommend using an incognito/private window – you can open this by right-clicking on your browser icon and selecting ‘new incognito/private’ window.

Next, head to https://aka.ms/mfasetup or www.office.com and sign in using your login credentials.

Once you’re signed in, you should be prompted to provide more information.

How to set up 2FA on Microsoft 365

Authentication Methods

There are many ways to authenticate your MFA account. The two most popular methods are via SMS or the Microsoft Authenticator app.

We recommend using Microsoft Authenticator as ti doesn’t require good phone service, just a 4/5G or WiFi connection – it’s also the quickest method.

In this guide, we cover how to set up both options.

Microsoft Authenticator App

What’s Microsoft Authenticator?

Microsoft Authenticator is a smartphone app that generates MEA codes. It’s completely non-intrusive and doesn’t access any of your phone’s data.

Downloading Microsoft Authenticator

Before selecting ‘Microsoft Authenticator’ on your computer, make sure to download the Microsoft Authenticator app from your phone’s App Store or Google Play Store.

There are lots of authenticator apps on the App Store.

To ensure you download the right one, look out for the one titled ‘Microsoft Authenticator’.

We’ve highlighted the app below, so you know what to look out for!

Tip: Make sure that the author of the app is ‘Microsoft Corporation’.

How to set up 2FA on Microsoft 365 - Screenshot showing how to download the Microsoft Authenticator App

Setting Up Microsoft Authenticator

Once you have the Microsoft Authenticator app downloaded on your phone, go ahead and open it up. If it’s your first time using it, you may be asked to set up an account right away – don’t worry this is normal.

If you already have some accounts in your Microsoft Authenticator App, click the ‘+’ icon in the top right corner to add an account.

Under ‘Account Type’, choose Work or School Account’ and then ‘Scan QR Code’.

How to set up 2FA on Microsoft 365 - How to add a new account to Microsoft Authenticator

Back To The Computer

Now you’ve downloaded the Microsoft Authenticator App, you can head back to your computer and click ‘Next’ on your screen (twice).

How to set up 2FA on Microsoft 365 - a screenshot showing how to get started with the Microsoft Authenticator app and MFA process How to set up 2FA on Microsoft 365 - how to finalise setting up a Microsoft Authenticator app

Next, you’ll be prompted to scan the QR code on the screen with your phone (remember, we just clicked ‘Scan QR Code’ on your phone.

If for some reason your camera is not currently active, click ‘Scan OR Code’ on your phone again.

How to set up 2FA on Microsoft 365 - a screenshot showing the QR code page to enable MFA on 365 and link to the Microsoft Authenticator App.

Checking Your Account

Once you’ve scanned the OR code, your Microsoft account should appear in your list of accounts, just like the image below.

How to set up 2FA on Microsoft 365 - Checking that the account connected successfully.

Back on the computer, tap ‘Next’, as we’re done with the OR code and want to test that it’s working.

How to set up 2FA on Microsoft 365 - A screenshot showing how to test that the app has connected successfully.

Confirming Sign In

Back on your mobile, enter the number you see on your computer screen and tap ‘Yes’. In this case, we’d enter the number 45.

How to set up 2FA on Microsoft 365 - a screenshot showing the sign-in process with 2FA enabled.

If the number is correct, your login will be approved. If it’s incorrect, your login will be denied.

Back on your computer, click ‘Next’.

How to set up 2FA on Microsoft 365 - a screenshot showing that the sign in has been successful.

You’ll now be asked to create an Application Password.

This will be used when linking your Outlook email software to your email account.

However, application passwords are no longer needed for this. So here, give it a name, like AppPassword, and click next.

Final Steps

As we don’t need this password, you can click done.

How to set up 2FA on Microsoft 365 - a screenshot showing the final steps of set up.

How to set up 2FA on Microsoft 365 - final steps to skip over.

Signing In With Authenticator App

Now MFA is enabled, you’ll need to re-sign in to your Microsoft 365 applications (such as Teams, Outlook and Microsoft 365 Online).

As per usual, you’ll need to enter your email address and password.

How to set up 2FA on Microsoft 365 - showing how the login process works with 2FA enabled.

You’ll then see a number appear on your screen and a push notification on your phone from Microsoft Authenticator.

How to set up 2FA on Microsoft 365 - showing the next step of the sign in process.

Simply enter the number on the screen within the authenticator app, and click ‘Yes’.

How to set up 2FA on Microsoft 365 - showing how the code will display on a mobile device.

You’re now authenticated and logged in!

To reduce the number of times you’ll need to do this, click ‘Yes’ on the ‘Stay Signed In?’ popup.

How to set up 2FA on Microsoft 365 - final popup for signing in.

SMS (Text Message)

What is SMS Authentication?

Some users may not like having to use the Microsoft Authenticator app, which is fine. Once you have MFA set up, you can add alternative methods, such as getting a code via SMS (text message).

Setting Up MFA With SMS

To set up MFA with SMS, you’ll need to head to office.com and sign in.

Once you’re in, head to the top right, click your user icon and then ‘View Account’ and then ‘Update Info’ under the Security Info tab.

How to set up 2FA on Microsoft 365 - how to view account and update security info.

Now, choose ‘Add Sign-In Method’.

How to set up 2FA on Microsoft 365 - how to add an additional sign in method.

And select ‘Phone’.

How to set up 2FA on Microsoft 365 - how to add a telephone number for 2FA (SMS)

Now click the blue ‘Add’ button.

How to set up 2FA on Microsoft 365 - selecting the drop down for SMS or phone call verification.

Here, make sure to select United Kingdom, then enter your mobile number, excluding the ‘0’ at the start.

Then either opt for a call or code. In this example we’ll pick code:

How to set up 2FA on Microsoft 365 - connecting your phone to the account.

The system will now send your phone a code.

How to set up 2FA on Microsoft 365 - the popup where the user will need to enter their authentication code.

You should receive a message like this.

How to set up 2FA on Microsoft 365 - how the text message will appear on a phone.

Type the code into the textbox on your computer and click ‘Next.

How to set up 2FA on Microsoft 365 - entering the SMS code into Microsoft's authenticator settings.

It should now be registered.

How to set up 2FA on Microsoft 365 - verification success message

Signing In With SMS Code

When you next log into Office.com or your other Microsoft 365 applications (such as Teams or Outlook), you’ll be sent a text message with a code.

How to set up 2FA on Microsoft 365 - signing in with SMS 2FA enabled.

Enter the code you received to complete the log-in process.

How to set up 2FA on Microsoft 365 - Entering the code into the authentication screen.

Changing Default Method

If you want to change which method is your default method, back on the ‘Security Info’ screen, click on the smaller ‘Change’ button, instead of ‘Add Method’ button.

How to set up 2FA on Microsoft 365 - how to change the default 2FA settings.

From here, you can change what your default verification method will be.

Personally, we would recommend using the Microsoft Authenticator app as you’re generally in a place that has WiFi,
than a place with good enough phone service to receive an SMS.

Download Guide

Are you a looking for IT Support for your business?

Get in touch via our Contact form or call us on 01225 426 800