And the 6-digit number in Microsoft Authenticator changes every 30 seconds, so even if they knew the number you used to sign in yesterday, they're still locked out. If somebody else tries to sign in as you, however, they'll enter your username and password, and when they get prompted for that second factor they're stuck! Unless they have YOUR smartphone, they have no way of getting that 6-digit number to enter. You open the app on your smartphone, it shows you a unique, dynamically created 6-digit number that you type into the site and you're in. Perhaps you're using the free Microsoft Authenticator app as your second factor. The first time you sign in on a device or app you enter your username and password as usual, then you get prompted to enter your second factor to verify your identity. If that's all you need then anybody who knows your username and password can sign in as you from anywhere in the world!īut if you have multifactor authentication enabled, things get more interesting. Let's say you're going to sign into your work or school account, and you enter your username and password. How does multifactor authentication work?

Something you are - Like a fingerprint, or facial recognition. Something you have - Like a smartphone, or a secure USB key. Something you know - Like a password, or a memorized PIN. The three most common kinds of factors are: For example, a password is one kind of factor, it's a thing you know.

A factor in authentication is a way of confirming your identity when you try to sign in.

Office 365 enable mfa