Activate MFA for your account

If you have lost your phone and/or have a new one, you need to install and activate Microsoft Authenticator in your new phone.

The phone that you do no longer have access to also needs to be removed from Microsoft Authenticator. You do this by going to the link below and following the instructions.

Manage multi-factor authentication on your Microsoft account

Once your old phone has been removed, you register your new phone following the instructions further up on this page. 

If you have deleted your Microsoft Authenticator app, you must first remove your registered phone and then register it again. 

Manage multi-factor authentication on your Microsoft account

To be able to install the app Microsoft Authenticator, you need a compatible mobile phone, iPhone 6S with iOS 15 or later or an Android phone with Android 8.

No, you can activate MFA for your Microsoft account regardless of whether you are connected to the university's network or located elsewhere. 

In order for the app to work at its best, you need to allow access to the camera (to scan QR codes), to notifications (to be able to approve the login) and to location (to identify the location of approvals).

The session for the secure login lasts for up to 90 days and is present in the background every time you log in. Therefore, if you are using the same computer and browser, you will receive a call for MFA approximately every 90 days.

Yes, you can use the app on several phones if you like. 

Yes, you can have several accounts. If you already have another account added to the app, you can skip part 1 of the guide further up the page and replace Part 2, Step 5 with:

1. Launch Microsoft Authenticator

2. Tap the + sign in the top right corner of the app

3. Select Work or school account

4. Select Scan QR Code and scan the QR code displayed on your computer screen.

On a daily basis, the university is exposed to phishing attempts where fraudsters try to obtain login credentials to our accounts, often via emails designed to trick the recipient into giving out their information.

Once an account has been hacked, the breach can cause a lot of damage. Malicious programs can spread viruses in your computer, encrypt information on your own and other people's storage areas or be spread to your contacts. One single user making one mistake might, in worst case, cause severe damage to the entire university. An example of such a consequence is the university email being banned by other actors.

By implementing multi-factor authentication, the university can to a larger extend prevent accounts from being hacked and minimize the damage that breaches may cause. MFA is therefore a necessary security measure to protect all the information within the university.

Several other universities and organizations already use MFA for logging into specific services, both for students and employees. A couple of other universities are just like us in the process of introducing MFA right now.