Setting up MFA with Microsoft Authenticator

4 min read · Updated on 19 October 2026

With multi-factor authentication (MFA) you confirm not only your password when signing in, but also a notification on your phone. Someone with just your password can't get in. Setting it up takes about five minutes.

What you need

Your work account (email address and password), your phone and a computer to follow the steps.

Steps

1. Install Microsoft Authenticator on your phone from the App Store or Google Play. Check that the publisher is Microsoft Corporation; there are fake apps with similar names.
2. On your computer, go to aka.ms/mfasetup and sign in with your work account. You'll land on the Security info page.
3. Choose Add sign-in method and then Microsoft Authenticator. Click Next until a QR code appears.
4. Open the app on your phone, tap the plus sign, choose Work or school account and then Scan QR code.
5. Click Next. You'll get a test notification with a number on your screen: enter that number in the app and approve.
6. Add a second method, for example your mobile number. You'll need it if your phone is lost or broken.

Good to know

• Never approve a notification you didn't trigger yourself. If you get unexpected notifications, choose Deny and tell your IT administrator: someone probably knows your password.
• New phone? Move Authenticator to the new phone before you wipe or hand in the old one.
• You can always view and change your methods at aka.ms/mysecurityinfo.
• One step further: passkeys in Authenticator are phishing-resistant. Ask your administrator whether they're enabled for you.