If someone gets hold of your Microsoft 365 password through a phishing email, a data breach or a guess, they can read your email, send invoices in your name and download your files. Multi-factor authentication (MFA) stops that, because a password on its own is no longer enough to sign in.
How it works
When you sign in from a new device, Microsoft asks for a second proof that it’s really you, usually a tap on the Microsoft Authenticator app on your phone. Someone who only has your password gets stuck at that step.
Set it up in five minutes
- 1
Install Microsoft Authenticator
Get it free from the App Store or Google Play on your phone. - 2
Go to your security info page
Sign in at mysignins.microsoft.com/security-info with your work account. - 3
Add a sign-in method
Choose Authenticator app and scan the QR code with your phone. - 4
Add a backup method
Add your mobile number too, so you’re not locked out if you replace your phone.
Never approve a sign-in request you didn’t start. If your phone asks you to approve a sign-in out of the blue, someone has your password: deny it and change your password right away.
Business owners: MFA works best when it’s turned on for everyone in the company, including shared and admin accounts.
Want us to take care of it?
We look after this every day for small businesses. Get in touch and we’ll set it up for you.

Leave A Comment