Set Up Multi‑Factor Authentication (MFA)

Category: Cybersecurity · Audience: Customers & Technicians · Est. time: 10 min

Summary

Multi‑factor authentication (MFA) adds a second check — usually an approval on your phone — so a stolen password alone can't get into your account. It's the single most effective protection against account takeover.

What you'll need

• Your work computer (to start setup) and your smartphone.
• The Microsoft Authenticator app (recommended over text codes).

Set it up

1. On a computer, go to aka.ms/mfasetup and sign in with your work account.
2. Click + Add sign‑in method → Authenticator app → Add.
3. On your phone, install Microsoft Authenticator (App Store / Google Play). Open it → + → Work or school account → Scan a QR code.
4. Back on the computer, click Next to show a QR code, and scan it with the app.
5. Approve the test notification that appears on your phone. Done.
6. Add a backup method — click + Add sign‑in method → Phone, and register your mobile number for text/call as a fallback.

How it works day‑to‑day

• When you sign in somewhere new, you'll get a notification (or a number to match) in the Authenticator app. Approve it only if you started the sign‑in.
• Some sign‑ins ask you to type a 2‑digit number from the login screen into the app — this prevents accidental approvals.

Important

• Register at least two methods (Authenticator and a phone number) so a lost phone doesn't lock you out.
• Never approve a prompt you didn't trigger — if one appears unexpectedly, deny it and tell BBN Support (someone may have your password).
• Getting a new phone? See Moving Microsoft Authenticator to a New Phone *before* wiping the old one.

If that doesn't work

• "MFA is enforced but I can't register" or you're locked out → contact BBN Support for an MFA reset (identity verified first).