Office 365 multi-factor authentication

Contents
1. Introduction .................................................................................................................................... 2
2. Setting up and updating Office 365 security information ............................................................ 3
2.1. Individual, and single-user accounts. .................................................................................... 3
2.2. Common, shared, and multi-user accounts .......................................................................... 3
3. Setting up security information on individual and single-user accounts ..................................... 4
3.1. Authenticator app (recommended) ....................................................................................... 4
3.2. Phone number ........................................................................................................................ 8
3.3. Security questions ................................................................................................................ 10
4. Setting up security information on common, shared, and multi-user accounts ....................... 12
4.1. Security questions ................................................................................................................ 12
5. Setting default security information ........................................................................................... 14

1
 1. Introduction

Multi-factor authentication (MFA) is a security process in which the user provides two or more
different authentication factors to verify themselves to better protect both the user's credentials
and the resources the user can access. MFA is an essential component of cybersecurity as passwords
on their own simply do not provide a sufficient level of protection anymore.

With MFA in place, even if a user is tricked into giving away the password, the additional
authentication step will avoid an account breach. This technical measure is strongly recommended
by the UK’s National Cyber Security Centre.

2
2. Setting up and updating Office 365 security information

2.1. Individual, and single-user accounts.

The use of official Microsoft Authenticator is strongly recommended. Please do the

following:

 Go to aka.ms/mfasetup
 Set up Microsoft Authenticator (see section 3.1)
 Set your default security information (see section 5). Microsoft
Authenticator is the recommended default authentication.
 Make sure to add/update at least one other piece of security information –
phone number, security questions, etc. (see section 3)

2.2. Common, shared, and multi-user accounts

Please do the following:

 Go to aka.ms/mfasetup
 Set up/update security questions, and keep them in a safe location (see
section 4.1)
 Remove any other security information (see section 4.1)

3
3. Setting up security information on individual and single-user
accounts

3.1. Authenticator app (recommended)

1. Navigate to aka.ms/mfasetup.
2. Click ‘Add security info’.

3. Choose ‘Authenticator app’.

4
4. Download the Microsoft Authenticator app on your phone from the App Store or Google
Play Store, then click ‘Next’.

5. Open the Microsoft Authenticator app on your phone and add an account as prompted.

5
6. Scan the QR code on your screen (not the one below) with your phone. You may need to
allow access to your phone’s camera.

7. On your computer, you will see the following:

6
8. On your phone, you will be asked to approve:

9. Approve the notification on your phone, then click Done.

7
3.2. Phone number

1. Navigate to aka.ms/mfasetup.
2. Click ‘Add security info’.

3. Choose ‘Phone’.

8
4. Choose your country code and input your phone number. Select either ‘Call me’ or ‘Text me
a code’.

5. Input the code and click ‘Done’.

9
3.3. Security questions

1. Navigate to aka.ms/mfasetup.
2. Click ‘Add security info’.

3. Choose ‘Security questions’.

10
4. Fill out questions and answers, then click Done.
Note: questions shown below are default examples. You should choose your own from the
drop-down list.

11
4. Setting up security information on common, shared, and multi-
user accounts

4.1. Security questions

1. Navigate to aka.ms/mfasetup.
2. Click ‘Add security info’.

3. Choose ‘Security questions’.

12
 4. Fill out questions and answers, then click Done.
Note: questions shown below are default examples. You should choose your own from the
drop-down lists.

It is strongly recommended that security questions are noted and safely stored so that they are
accessible when needed.

5. Make sure to delete any security info other than security questions by clicking the
corresponding ‘X’ button (common, shared, and multi-user accounts only!).

13
5. Setting default security information

1. Navigate to aka.ms/mfasetup.

2. Click ‘Change default’.

3. Choose your preferred authentication method, then click ‘Done’. HALO strongly
recommends Authenticator app notifications.

14