Enable MFA (two-step verification) on Microsoft 365
MFA (Multi-Factor Authentication) — also called two-step verification — means that in addition to your password, you also have to approve sign-ins via your phone. It prevents over 99% of account takeovers, even if your password is compromised. It is the single most important thing you can do to protect your business.
Download Microsoft Authenticator
Install Microsoft Authenticator from the App Store (iPhone) or Google Play (Android). It is free and takes less than a minute.
Sign in to your Microsoft 365 account
Go to https://myaccount.microsoft.com in a browser and sign in with your work email and password.
Go to security settings
Click Security info in the menu on the left. Then click Add sign-in method and select Authenticator app.
Connect the Authenticator app
Microsoft shows a QR code on the screen. Open the Authenticator app on your phone, tap "+" (add account), select Work or school account, and scan the QR code with the camera. The app confirms with a green tick once it is connected.
Test the approval
Microsoft sends a test notification to your Authenticator app. Approve it by tapping Approve and, if prompted, entering the number shown. Once the test succeeds, MFA is enabled.
How it works from now on
The next time you sign in to Microsoft 365, you enter your password as usual — and then approve via the Authenticator app. It takes 3 extra seconds and gives you massive extra protection. On devices you use daily, you can select "remember for 30 days" so you don't have to approve every single time.
We recommend enabling MFA for ALL employees — not just management. Most attacks start with the employee who has the weakest password.
We review our guides at least every six months to make sure the content is up to date. If you spot anything outdated or missing, please write to us — we would love to hear from you.
Frequently asked questions
What is MFA in Microsoft 365?
Is MFA free in Microsoft 365?
What do we do if an employee loses their phone?
Can MFA be enabled for individual users?
More about security
What is IT equipment as a service?
Want to optimise your company's IT budget? Learn the benefits of IT equipment as a service and how hardware leasing can simplify your day-to-day IT operations.
Microsoft 365 backup: protect your business data
Missing a backup of your Microsoft 365 data? Read our guide to where Microsoft's own responsibility ends, and how to secure your business-critical data.
Help with Microsoft 365 for your business
Does your business need help with Microsoft 365? Get a practical guide to setting up, troubleshooting and optimising your M365 environment here.