Microsoft 365 Multi-Factor Authentication (MFA)

Up to now you only had a password/passphrase to protect your account. If someone got hold of your password/passphrase (an authentication factor), this person could use your username and password/passphrase to impersonate you. If the system would request a second or third unique factor, taking over your account is a lot harder. There are 3 factors of authentication:

1. Something you know: your password/passphrase
2. Something you have: your (smart)phone
3. Something you are: your fingerprint

As you can see, with MFA just stealing your password/passphrase will not be enough to take control of your account. 

Microsoft 365 is currently using Two-Factor Authentication (2FA), relying on a password/passphrase and a phone. In short it can be explained in the following steps:

1. Your Microsoft 365 account gets enabled for MFA
2. Next time you log on to an Microsoft 365 account you need to configure MFA (this requires a web browser)
3. You identify the methods of the second authentication. If you have an iPhone or Android we recommend the Microsoft Authenticator App
4. After you complete configuration, MFA will be invoked each time you connect to an Microsoft 365 service from a new device.

If you have a smart phone, we recommend using the Microsoft Authenticator App. It makes using Microsoft 365 MFA quick and easy. Install it ahead of time from the:

• Apple App Store
• Google Play Store
• Follow instructions at Microsoft Authenticator App Setup for Multifactor Authentication

Also, when you use your fingerprint to unlock the smart phone, you are truly using 3-factor authentication. 

Need additional information or assistance? Contact CTS.