🔹 Part 1 — Set Up Multi-Factor Authentication (MFA)

MFA helps protect your Microsoft 365 account by requiring an additional verification method, such as a phone or Authenticator app, when you sign in.

1. Go to aka.ms/mfasetup and sign in with your work or school account.
2. Click Next to start setup.
3. Choose your preferred authentication method:
   • Microsoft Authenticator app — recommended for faster, secure approvals.
   • Text message (SMS) — receive a 6-digit verification code.
   • Phone call — approve sign-in through voice confirmation.
4. For Authenticator setup:
   1. Download the Microsoft Authenticator app from the App Store or Google Play.
   2. In the app, tap Add account → Work or school account.
   3. Scan the QR code shown on your computer screen.
   4. Approve the test notification when prompted.
5. Click Finish once setup completes.

🔹 Part 2 — Self-Service Password Reset (SSPR)

If you forget your password or get locked out, you can reset it using Microsoft’s self-service portal or the Windows login screen.

Option A — Online Portal

1. Visit passwordreset.microsoftonline.com.
2. Enter your organization email address and follow the on-screen prompts to verify your identity.
3. When resetting your password, ensure it meets your organization’s policy:
   • Minimum 8 characters
   • At least one uppercase, lowercase, number, and symbol
4. Once complete, sign in with your new password at portal.office.com.

Option B — From the Windows Login Screen

1. At the login screen, click Reset password (if your organization has enabled it).
2. Verify your identity using your registered MFA method.
3. Set a new password and sign in again.

Option C — Change Password While Logged In

1. Press Ctrl + Alt + Delete.
2. Select Change a password.
3. Enter your current password and then your new password twice.

🔹 Part 3 — IT Administrator: Update a User’s MFA Phone Number

Admins can reset or update a user’s MFA phone number via the Microsoft 365 Admin Center or the Azure Entra ID portal.

Method 1 — Microsoft 365 Admin Center

1. Sign in at admin.microsoft.com.
2. Navigate to Users → Active users.
3. Select the affected user account.
4. Click Manage multifactor authentication under Authentication methods.
5. Select Manage user settings.
6. Enable Require selected users to provide contact methods again and click Save.
7. The user will be prompted to re-register MFA methods upon next sign-in.

Method 2 — Azure Entra ID (Azure AD)

1. Go to entra.microsoft.com.
2. Under Users → All users, select the target account.
3. Navigate to Authentication methods → Edit.
4. Remove or update the phone number, or reset MFA registration entirely.
5. Click Save. The user will confirm their new MFA method during next sign-in.

✅ Summary

• Users: Register MFA at aka.ms/mfasetup and manage methods at mysignins.microsoft.com.
• Self-Service Reset: Use passwordreset.microsoftonline.com or Ctrl + Alt + Delete → Reset password.
• Admins: Manage MFA info via Microsoft 365 Admin Center or Azure Entra Portal.

Back to Account Guides