Setting up multi-factor authentication (MFA)

Multi-factor authentication (MFA, sometimes called two-step verification) means signing in needs something you know (your password) and something you have (your phone). A stolen password alone is no longer enough.

Setting it up 1. Install the authenticator app your organisation uses (for example Microsoft Authenticator) from your phone's app store. 2. Sign in to your account on a computer. You'll be asked to set up MFA, or find it under your account's security settings. 3. Scan the QR code shown on screen with the app, and follow the prompts. 4. Add a backup method (a phone number) in case you lose your phone.

Good habits - Only approve a sign-in request if you've just tried to sign in yourself. An unexpected prompt means someone else has your password: deny it and tell us. - Getting a new phone? Move your authenticator across before you wipe the old one.