Here’s a clear, step-by-step guide to setting up Two-Factor Authentication (2FA) with Microsoft. This works for Microsoft 365, Outlook, Teams, Azure AD (Entra ID), and most Microsoft work or school accounts.
Two-Factor Authentication (also called Multi-Factor Authentication / MFA) adds an extra layer of security by requiring something you know (your password) and something you have (your phone, app, or security key).
Sign in with your Microsoft account
You’ll see a Security info page
Click Add sign-in method
Choose Authenticator app
Click Add
If you don’t already have it:
iOS: App Store → Microsoft Authenticator
Android: Google Play Store → Microsoft Authenticator
Open the app once installed.
On your computer, click Next
Open Microsoft Authenticator on your phone
Tap + → Work or school account
Scan the QR code shown on your screen
Microsoft will send a test notification to your phone
Tap Approve in the app
Once approved, the app is successfully linked 🎉
In case you lose access to your phone, add at least one backup:
Recommended options:
Phone number (SMS or call)
Alternate authenticator app
Security key (YubiKey, etc.)
To add:
Click Add sign-in method
Choose your backup option
Follow the prompts
Make sure Microsoft Authenticator – notification is set as your default method.
You can change this anytime on the Security info page.
When signing in, you’ll enter your password then
You’ll receive a push notification or code in your Authenticator app
Simply approve to finish signing in