Learn how to set up multifactor authentication (also known as MFA, two-factor authentication, or 2FA) in your Microsoft 365 organization.
Once your admin enables your organization, and your account, for multi-factor authentication (MFA) you have to set up your user account to use it. This should only take a minute or so.
Administrators can choose forms of secondary authentication and configure challenges for MFA based on configuration decisions. You don't need to change apps and services to use Microsoft Entra multifactor authentication.
Learn about mandatory multifactor authentication (MFA) enforcement for Azure, Microsoft 365, and other admin portals, and how to prepare your tenant.
Multi-factor authentication (MFA) helps you to access your accounts more securely. It's a way to prove that you are who you say you are. Because passwords can be forgotten, stolen, or compromised, MFA is an additional security step that helps protect your account by making it harder for other people to sign in to your account. Watch
To customize the end-user experience for Microsoft Entra multifactor authentication (MFA), you can configure options for reporting suspicious activities. The following table describes Microsoft Entra MFA settings, and subsections cover each setting in more detail.
Convert users from per-user MFA to Conditional Access based MFA If your users were enabled using per-user MFA enabled and enforced Microsoft Entra multifactor authentication, we recommend that you enable Conditional Access for all users and then manually disable per-user multifactor authentication.
Note For security reasons, public user contact information fields shouldn't be used to perform MFA. Instead, users should populate their authentication method numbers to be used for MFA. To add or change authentication methods for a user in the Microsoft Entra admin center: