A stolen password is the most common way into a company's email. Multi-factor authentication (MFA) closes that door with an extra step that takes seconds.
What it is
On top of the password, signing in also asks for a second proof of identity, usually a notification in the Microsoft Authenticator app on your phone. Anyone who steals the password still lacks the second factor and cannot get in.
Why it matters
Phishing, reused passwords and data leaks from other sites make passwords easy to obtain. Microsoft estimates that an account with MFA is more than 99.9% less likely to be compromised.
How to turn it on in Microsoft 365
- Start with the administrator accounts, which are the most targeted.
- Turn on the Microsoft Entra ID security defaults or, with Business Premium, conditional access policies.
- Tell your team in advance and explain what will change.
- Ask each person to install Microsoft Authenticator and register their phone.
- Set up recovery methods, so nobody gets locked out when they change phones.
How long it takes
Registration takes each person a few minutes. For the company, a well-planned morning is enough to turn it on for every account.
We can handle everything for you, including a step-by-step guide for your team.