Multi-factor authentication (MFA) means that even if someone steals your password, they still can't sign in without your phone. Microsoft Authenticator is the most common method for Microsoft 365. You'll need your computer and your phone.
Before you start
- Have your phone with you, unlocked and connected to the internet.
- Sign in on a computer, not the same phone, so you can scan a QR code from the screen.
- Screen options and wording can vary slightly depending on your organisation's settings.
Set up Authenticator
- On your phone, install Microsoft Authenticator from the App Store or Google Play.
- On your computer, sign in to your Security info page at mysignins.microsoft.com/security-info. If you're setting up for the first time, you may be prompted to do this automatically when you sign in.
- Select Add sign-in method, choose Microsoft Authenticator, then follow the prompts until a QR code appears.
- In the Authenticator app, tap the + icon, choose Work or school account, then Scan a QR code and point your phone at the screen.
- Approve the test notification on your phone to finish.
If the app asks to send you notifications, allow it. Without notifications you won't see sign-in requests when they arrive.
Microsoft's guide is on the Microsoft Support site.
Habits worth building
Only approve a sign-in request you started yourself. An unexpected prompt, especially several in a row, can mean someone else has your password. Deny it and call us on 1300 079 636.
- When you sign in, you'll usually see a number on your computer screen. Type that number into the app to approve. See unexpected MFA prompts for what to do if a request turns up out of the blue.
- Getting a new phone? Set up Authenticator on the new phone before you wipe or trade in the old one. See move Microsoft Authenticator to a new phone. If it's too late, contact the service desk and we'll help you re-register.
Still stuck?
If the QR code won't scan or you don't get the test notification, log a ticket and we'll help you finish setup.