Multifactor Authentication (MFA), Frequently Asked Questions

Multi-Factor Authentication (MFA) is a security method requiring users to verify their identity through two or more factors. It's who you are (your netid), what you know (password), and what you have (device). It's used to enhance protection against unauthorized access, reducing the risk of cyber threats. This article is a landing page for enrollments, questions and troubleshooting steps for MFA.

Support Videos

Duo Mobile App Registration

MFA Experience

Enrollment

Multifactor Authentication (MFA), Enrollment

Microsoft Authenticator:
The Microsoft Authenticator app is available for:

iOS and iPadOS (15.0 or later)
Android (8.0 and later)

Questions about Devices

Should I have more than one MFA Method?
It is recommended to have more than one MFA Method, having two methods helps reduce downtime over a lost phone or hardware token.

Can I Register Multiple Devices/Methods?

Yes. Registering multiple MFA devices/methods is strongly recommended in case your primary device becomes unavailable. Note: University phone numbers cannot be used for MFA enrollment.

Is a Smartphone Required for MFA?
No. A smartphone is recommended, but not required.

Supported MFA methods include:

Microsoft Authenticator
Windows Hello/Windows Hello for Business
Hardware token Security key
Passkey

Do I Need to Use My Personal Phone?

No. You may use another supported device or authentication method. However, most users prefer the Microsoft Authentication app because it provides the simplest sign-in experience. Instead of a smartphone, you may register with a tablet with the installed, or a token (Multifactor Authentication (MFA), Yubikey, Purchase and Use).

What Happens If I Lose My MFA Device?

If you do not have a second MFA Method set up, you will need to contact IT Service Desk for additional help, see MFA, How to Create a Temporary Access Pass (TAP) in Microsoft Entra ID