How to Set Up Multi-Factor Authentication in Microsoft 365
Multi-Factor Authentication (MFA) adds an extra layer of security to your Microsoft 365 account by requiring a second method of verification, such as a mobile app notification or a text message, in addition to your password.
Enabling MFA helps protect your account from unauthorised access, even if your password is compromised. Here’s how to set it up.
What You’ll Need
-
Access to your Microsoft 365 account
-
A smartphone with the Microsoft Authenticator app (recommended) or access to SMS
Step 1: Sign in to Microsoft 365
-
Sign in with your Microsoft 365 email and password
If your administrator has already enabled MFA for your account, you will be prompted to set it up automatically.
Step 2: Start the MFA Setup Process
-
After signing in, you may see a prompt:
“More information required” – click Next -
You will be directed to the Additional security verification page
Step 3: Choose Your MFA Method
You’ll see three options:
-
Authentication phone (receive a text or call)
-
Office phone
-
Mobile app (recommended)
We recommend using the Microsoft Authenticator app for speed and security.
To Set Up Using the Microsoft Authenticator App
-
On your phone, download the Microsoft Authenticator app from:
-
Apple App Store (iPhone)
-
Google Play Store (Android)
-
-
On your computer, choose Mobile app, then select Receive notifications for verification
-
Click Set up
Step 4: Scan the QR Code
-
Open the Microsoft Authenticator app
-
Tap the + icon, then Work or school account
-
Use your phone to scan the QR code on your screen
-
Click Next on your computer
You should now receive a test notification on your phone. Approve it to continue.
Step 5: Save Your Settings
Once the test is successful:
-
Click Next
-
You’ll be shown backup codes in case you lose access to your phone
-
Save these codes in a safe place (not on the same device)
-
Click Done
Optional: Set Up Backup MFA Method
We recommend adding a second method (such as SMS or an alternate number):
-
Click Add sign-in method
-
Choose a second option like Phone or Email
This ensures you can still access your account if you lose your phone.
Common Issues and Fixes
Not receiving notifications?
-
Ensure push notifications are enabled for the app
-
Re-open the Microsoft Authenticator app to refresh it
-
Try SMS verification as a backup
Lost your phone?
-
Use your backup method or recovery codes
-
Contact your IT provider or administrator to reset MFA settings
Final Thoughts
Setting up MFA in Microsoft 365 is one of the simplest and most effective ways to protect your email, files, and business data. At Cyber United, we recommend all clients enable MFA as standard.
Need Help?
If you’re unsure or need assistance setting up MFA across your business, we’re here to help.
