Security & compliance

Secure employee accounts with MFA

Your browser does not support video.

Multi-factor authentication means you and your employees must provide more than one way to sign in to Microsoft 365 is one of the easiest ways to secure your business.

To get started, go to the admin center at https://admin.microsoft.com.

  1. Select  Show All, then choose the Azure Active Directory Admin Center..

  2. Select Azure Active Directory, Properties, Manage Security defaults.

  3. Under Enable Security defaults, select Yes and then Save.

Next time the selected employees sign in, they'll be asked to set up the Microsoft Authenticator app on their phones for a second form of authentication.

To help protect your business from online threats, we recommend you turn on Multi-Factor Authentication or MFA. If you signed up for Microsoft 365 recently, this is enabled already as part of your security defaults.

If it's not on already, here's how to enable MFA for your business. 


From the Microsoft 365 admin center, select Show All, then choose the Azure Active Directory Admin Center.

 Select Azure Active Directory, Properties, Manage Security defaults.


 Under Enable Security defaults, select Yes and then Save.


The next time you and your employees sign in, you'll be prompted to set up authentication on your phone.


Learn more about it at aka.ms/setup-phone-authentication.</p>

Need more help?

Expand your Office skills
Explore training
Get new features first
Join Office Insiders

Was this information helpful?

Thank you for your feedback!

Thank you for your feedback! It sounds like it might be helpful to connect you to one of our Office support agents.

×