Why It Matters:

Strong passwords and multi-factor authentication (MFA) are your first line of defense against identity theft, data breaches, and unauthorized access.

A black screen with white text AI-generated content may be incorrect.

 

Secure Password Practices

Use Strong, Unique Passwords

  • At least 12 characters
  • Mix of uppercase, lowercase, numbers, and symbols
  • Avoid dictionary words, names, or predictable patterns

Never Reuse Passwords

  • Use a different password for every account
  • Reusing passwords increases risk if one site is breached

Use a Password Manager

  • Store and autofill complex passwords securely
  • Options:
    • Microsoft Edge Password Manager
    • Third-party tools (e.g., 1Password, Bitwarden, LastPass)

 

Using Microsoft Authenticator for Two-Factor Authentication (2FA)

Step 1: Download Microsoft Authenticator

  • Available on iOS and Android
  • Search for Microsoft Authenticator in the App Store or Google Play

Step 2: Set Up Your Account

  1. Open the app and tap Add account.
  2. Choose Work or school account or Personal account.
  3. Scan the QR code provided during your Microsoft 365 login setup.
    Screens screenshot of a mobile phone AI-generated content may be incorrect.

Step 3: Use Authenticator for Sign-In

  • When signing in to Microsoft 365:
    • You’ll receive a push notification to approve
    • Or enter a time-based one-time code (TOTP) from the app

Step 4: Enable 2FA in Microsoft Account

  1. Go to https://account.microsoft.com/security
  2. Click Advanced security options
  3. Turn on Two-step verification
  4. Add Microsoft Authenticator as your primary method