The different authentication options available in the My Profile under “My Security Info” page exist to let users prove their identity using multiple methods, which strengthens account security and provides flexibility during sign‑in or account recovery. Instead of relying only on a password—which can be stolen or guessed—these options (such as the Microsoft Authenticator app or passkeys) add extra verification factors so that access requires something you know, have, or are.
When you sign in to your new account for the first time, you will be guided through a short setup process to configure multi-factor authentication (MFA). You must complete this step before gaining full access to your account. The setup process is designed to be simple and only takes a few minutes, helping ensure your account is protected from unauthorized access from the very beginning.
Microsoft Authenticator is a free mobile app from Microsoft for iPhone, iPad, and Android devices that helps protect your UWin Account (Microsoft work/school account). Passwords alone are no longer enough to keep accounts secure. Microsoft Authenticator adds an extra layer of protection that helps prevent unauthorized access, even if someone else knows your password.
To provide additional security for sensitive data stored on your University-owned Windows 10 laptop, I.T. Services can assist you with enabling Bitlocker drive encryption.
How to sign in with Multi-Factor Authentication
If you have access to a computer, you may be able to update your MFA configuration to include your new phone following steps outlined in this article. If you can't, you have to submit a request by opening a ticket to have your MFA reset.
Microsoft recently announced that on October 1, 2022, basic authentication will be permanently disabled in Microsoft 365 for all organizations.
Passkeys provide a more secure, phishing-resistant way to verify your identity when signing in. Instead of entering a code or approving a notification, a passkey uses cryptographic security and confirms your identity using a trusted device, such as your phone, computer, or security key, along with a fingerprint, facial recognition, or PIN. Because the passkey is tied to the legitimate website and cannot be intercepted or reused by attackers, it helps protect your account from phishing attacks, p