How to enable two-factor authentication (2FA) for Microsoft 365 accounts

Summary

This guide helps you troubleshoot and resolve: How to enable two-factor authentication (2FA) for Microsoft 365 accounts. Follow the steps below to fix the issue.

Common Causes

Two‑factor authentication (2FA) adds an extra layer of protection to your Microsoft 365 account by requiring a second verification step when you sign in. This guide walks you through enabling 2FA for both administrators and end users, helping you keep business email and data secure.

Quick Fix Steps

1. Sign in to the Microsoft 365 portal at https://portal.office.com with your work account.
2. Click your profile picture in the top‑right corner and select My account.
3. Choose Security & privacy from the left‑hand menu.
4. Select Additional security verification and then click Set up two‑step verification.
5. Follow the on‑screen prompts to choose a verification method (authenticator app, text message, or phone call) and complete the setup.

Detailed Instructions

Prerequisites

• Active Microsoft 365 licence that includes Azure AD (most Business and Enterprise plans).
• Access to the account’s security info page – either as an admin or as the user themselves.
• Smartphone with a compatible authenticator app (Microsoft Authenticator, Google Authenticator, etc.) or a mobile phone capable of receiving SMS/calls.

Enable 2FA for the organisation (admin)

1. Log in to the Microsoft 365 admin centre at https://admin.microsoft.com using an admin account.
2. In the left navigation, expand Settings and click Org settings.
3. Choose the Security & privacy tab.
4. Under Multi‑factor authentication, click Manage multi‑factor authentication. This opens the Azure AD MFA portal.
5. On the Users tab, select the users you want to enforce 2FA for, then click Enable in the right‑hand pane.
6. Confirm the action when prompted. Users will be required to set up 2FA the next time they sign in.
7. Optionally, configure Conditional Access policies to require MFA for specific apps or locations.

Enable 2FA for an individual user (self‑service)

1. Sign in to My Microsoft account at https://myaccount.microsoft.com.
2. From the left menu, select Security > More security options.
3. Under Two‑step verification, click Set up two‑step verification.
4. Choose your preferred verification method:
   • Authenticator app – Scan the QR code with your app and enter the generated code.
   • Phone number – Receive a text message or voice call with a code.
5. Enter the verification code to confirm the method works, then click Finish.
6. Make a note of the app passwords you may need for legacy applications that don’t support MFA.

Troubleshooting

Common issues

• Can't locate the security info page – Ensure you are signed in with the correct work account, not a personal Microsoft account.
• Authenticator app won’t scan QR code – Check that your device camera is clean and that you have granted the app permission to use the camera.
• SMS not received – Verify the phone number is entered correctly and that your carrier isn’t blocking short‑code messages.
• App passwords not working – Remember that app passwords are only needed for apps that don’t support modern authentication; they cannot be used for web sign‑ins.

When you need further assistance

If you’ve tried the steps above and still encounter problems, please Open a Ticket through our support portal. Include details such as the user’s email address, the exact error message, and any screenshots that show where the process stops.

Still Having Issues?