|
1 | 1 | --- |
2 | | -title: Set up two-step verification - Azure Active Directory | Microsoft Docs |
3 | | -description: When your company configures Azure Multi-Factor Authentication, you will be prompted to sign up for two-step verification. Learn how to set it up. |
| 2 | +title: Set up your two-factor verification methods overview - Azure Active Directory | Microsoft Docs |
| 3 | +description: Overview about how to set up your two-factor verification methods for two-factor verification. |
4 | 4 | services: active-directory |
5 | | -keywords: how to use azure directory, active directory in the cloud, active directory tutorial |
6 | 5 | author: eross-msft |
7 | 6 | manager: daveba |
8 | | -ms.reviewer: richagi |
9 | | -ms.assetid: 46f83a6a-dbdd-4375-8dc4-e7ea77c16357 |
10 | 7 |
|
11 | | -ms.workload: identity |
12 | 8 | ms.service: active-directory |
13 | 9 | ms.subservice: user-help |
14 | | -ms.topic: conceptual |
15 | | -ms.date: 05/15/2017 |
| 10 | +ms.workload: identity |
| 11 | +ms.topic: overview |
| 12 | +ms.date: 08/12/2019 |
16 | 13 | ms.author: lizross |
17 | 14 | ms.collection: M365-identity-device-management |
18 | 15 | --- |
19 | 16 |
|
20 | | -# Set up my account for two-step verification |
21 | | -Two-step verification is an additional security step that helps protect your account by making it harder for other people to break in. If you're reading this article, you probably got an email from your work or school admin about Multi-Factor Authentication. Or maybe you tried to sign in and got a message asking you to set up additional security verification. If that's the case, **you cannot sign in until you have completed the auto-enrollment process**. |
22 | | - |
23 | | -This article helps you set up your **work or school account**. If you want to enable two-step verification for your own, personal Microsoft account, see [About two-step verification](https://support.microsoft.com/help/12408/microsoft-account-about-two-step-verification). |
| 17 | +# Set up your two-factor verification methods overview |
24 | 18 |
|
25 | | -## Set up your account |
| 19 | +Your organization has turned on two-factor verification, meaning that your work or school account sign-in now requires a combination of your username, your password, and a mobile device or phone. Your organization turned on this extra verification because it's more secure than just a password, relying on two forms of authentication: something you know and something you have with you. Two-factor verification can help to prevent malicious hackers from pretending to be you, because even if they have your password, odds are that they don't have your device, too. |
26 | 20 |
|
27 | | -When your company support requires you to start using two-step verification, you'll see a screen that says **Your admin has required that you set up this account for additional security verification**: |
| 21 | +>[!Important] |
| 22 | +>This content is intended for users. If you're an administrator, you can find more information about how to set up and manage your Azure Active Directory (Azure AD) environment in the [Azure Active Directory Documentation](https://docs.microsoft.com/azure/active-directory). |
28 | 23 |
|
29 | | - |
| 24 | +## Who decides if you use this feature? |
30 | 25 |
|
31 | | -To get started, select **Set it up now.** |
| 26 | +Depending on your account type, your organization might decide that you must use two-factor verification, or you might be able to decide for yourself. |
32 | 27 |
|
33 | | -If you do not see a screen like this when you sign in, follow the directions in [Manage your settings for two-step verification](multi-factor-authentication-end-user-manage-settings.md#using-the-additional-security-verification-page) to find the settings page where you can manage your verification options. |
| 28 | +- **Work or school account.** If you're using a work or school account (for example, [email protected]), it's up to your organization whether you must use two- factor verification , along with the specific verification methods. Because your organization has decided you must use this feature, there is no way for you to individually turn it off. |
34 | 29 |
|
35 | | -## Decide how you want to verify your sign-ins |
| 30 | +- **Personal Microsoft account.** You can choose to set up two-factor verification for your personal Microsoft accounts (for example, [email protected]). If you're having problems with two-factor verification and your personal Microsoft account, see [Turning two-factor verification on or off for your Microsoft account](https://support.microsoft.com/help/4028586/microsoft-account-turning-two-step-verification-on-or-off). Because you choose whether to use this feature, you can turn it on and off whenever you want. |
36 | 31 |
|
37 | | -The first question in the enrollment process is how you want us to contact you. Take a look at the options in the table, and use the links to go to the setup steps for each method. |
| 32 | +## Access the Additional security verification page |
38 | 33 |
|
39 | | -| Contact method | Description | |
40 | | -| --- | --- | |
41 | | -| [Mobile app](#use-a-mobile-app-as-the-contact-method) |- **Receive notifications for verification.** This option pushes a notification to the authenticator app on your smartphone or tablet. View the notification and, if it is legitimate, select **Authenticate** in the app. Your work or school may require that you enter a PIN before you authenticate.<br>- **Use verification code.** In this mode, the authenticator app generates a verification code that updates every 30 seconds. Enter the most current verification code in the sign-in interface.<br>The Microsoft Authenticator app is available for [Android](https://go.microsoft.com/fwlink/?linkid=866594) and [iOS](https://go.microsoft.com/fwlink/?linkid=866594).| |
42 | | -| [Mobile phone call or text](#use-your-mobile-phone-as-the-contact-method) |- **Phone call** places an automated voice call to the phone number you provide. Answer the call and press # in the phone keypad to authenticate.<br>- **Text message** ends a text message containing a verification code. Following the prompt in the text, either reply to the text message or enter the verification code provided into the sign-in interface. | |
43 | | -| [Office Phone Call](#use-your-office-phone-as-the-contact-method) |Places an automated voice call to the phone number you provide. Answer the call and presses # in the phone keypad to authenticate. | |
| 34 | +After your organization turns on and sets up two-factor verification, you’ll get a prompt telling you to provide more information to help keep your account secure. |
44 | 35 |
|
45 | | -## Use a mobile app as the contact method |
46 | | -Using this method requires that you install an authenticator app on your phone or tablet. The steps in this article are based on the Microsoft Authenticator app, which is available for [Android](https://go.microsoft.com/fwlink/?Linkid=825072) and [iOS](https://go.microsoft.com/fwlink/?Linkid=825073). |
| 36 | + |
47 | 37 |
|
48 | | ->[!NOTE] |
49 | | ->You don’t have to use the Microsoft Authenticator app. If you’re already using another authenticator app, you can continue to use it. |
| 38 | +### To access the Additional security verification page |
50 | 39 |
|
51 | | -1. Select **Mobile app** from the drop-down list. |
52 | | -2. Select either **Receive notifications for verification** or **Use verification code**, then select **Set up**. |
| 40 | +1. Select **Next** from the **More information required** prompt. |
53 | 41 |
|
54 | | -  |
| 42 | + The **Additional security verification** page appears. |
55 | 43 |
|
56 | | -3. On your phone or tablet, open the app and select **+** to add an account. (On Android devices, select the three dots, then **Add account**.) |
57 | | -4. Specify that you want to add a work or school account. The QR code scanner on your phone opens. If your camera is not working properly, you can select to enter your company information manually. For more information, see [Add an account manually](#add-an-account-manually). |
58 | | -5. Scan the QR code picture that appeared with the screen for configuring the mobile app. Select **Done** to close the QR code screen. |
| 44 | +2. From the **Additional security verification** page, you must decide which two-factor verification method to use to verify you are who you say you are after signing into your work or school account. You can select: |
59 | 45 |
|
60 | | -  |
| 46 | + | Contact method | Description | |
| 47 | + | --- | --- | |
| 48 | + | Mobile app | <ul><li>**Receive notifications for verification.** This option pushes a notification to the authenticator app on your smartphone or tablet. View the notification and, if it is legitimate, select **Authenticate** in the app. Your work or school may require that you enter a PIN before you authenticate.</li><li>**Use verification code.** In this mode, the authenticator app generates a verification code that updates every 30 seconds. Enter the most current verification code in the sign-in screen.<br>The Microsoft Authenticator app is available for [Android](https://go.microsoft.com/fwlink/?linkid=866594) and [iOS](https://go.microsoft.com/fwlink/?linkid=866594).</li></ul> | |
| 49 | + | Authentication phone | <ul><li>**Phone call** places an automated voice call to the phone number you provide. Answer the call and press the pound key (#) on the phone keypad to authenticate.</li><li>**Text message** ends a text message containing a verification code. Following the prompt in the text, either reply to the text message or enter the verification code provided into the sign-in interface.</li></ul> | |
| 50 | + | Office phone | Places an automated voice call to the phone number you provide. Answer the call and press the pound key (#) on the phone keypad to authenticate. | |
61 | 51 |
|
62 | | -6. When activation finishes on the phone, select **Contact me**. This step sends either a notification or a verification code to your phone. Select **Verify**. |
63 | | -7. If your company requires a PIN for approving sign-in verification, enter it. |
64 | | - |
65 | | -  |
| 52 | +## Next steps |
66 | 53 |
|
67 | | -8. After PIN entry is complete, select **Close**. At this point, your verification should be successful. |
68 | | -9. We recommend that you enter your mobile phone number in case you lose access to your mobile app. Specify your country/region from the drop-down list, and enter your mobile phone number in the box next to the country/region name. Select **Next**. |
69 | | -10. At this point, you are prompted to set up app passwords for non-browser apps such as Outlook 2010 or older, or the native email app on Apple devices. This is because some apps don't support two-step verification. If you do not use these apps, click **Done** and skip the rest of the steps. |
70 | | -11. If you are using these apps, copy the app password provided and paste it into your application instead of your regular password. You can use the same app password for multiple apps. For more info, [help with app passwords]. |
71 | | -12. Click **Done**. |
| 54 | +After you've accessed the **Additional security verification** page, you must select and set up your two-factor verification method: |
72 | 55 |
|
73 | | -### Add an account manually |
74 | | -If you want to add an account to the mobile app manually, instead of using the QR reader, follow these steps. |
| 56 | +- [Set up your mobile device as your verification method](multi-factor-authentication-setup-phone-number.md) |
75 | 57 |
|
76 | | -1. Select the **Enter account manually** button. |
77 | | -2. Enter the code and the URL that are provided on the same page that shows you the barcode. This info goes in the **Code** and **URL** boxes on the mobile app. |
| 58 | +- [Set up your office phone as your verification method](multi-factor-authentication-setup-office-phone.md) |
78 | 59 |
|
79 | | -  |
80 | | -3. When the activation has finished, select **Contact me**. This step sends either a notification or a verification code to your phone. Select **Verify**. |
| 60 | +- [Set up the Microsoft Authenticator app as your verification method](multi-factor-authentication-setup-auth-app.md) |
81 | 61 |
|
82 | | -## Use your mobile phone as the contact method |
83 | | -1. Select **Authentication Phone** from the drop-down list. |
| 62 | +## Related resources |
84 | 63 |
|
85 | | -  |
86 | | -2. Choose your country/region from the drop-down list, and enter your mobile phone number. |
87 | | -3. Select the method you would prefer to use with your mobile phone - text or call. |
88 | | -4. Select **Contact me** to verify your phone number. Depending on the mode you selected, we send you a text or call you. Follow the instructions provided on the screen, then select **Verify**. |
89 | | -5. At this point, you are prompted to set up app passwords for non-browser apps such as Outlook 2010 or older, or the native email app on Apple devices. This is because some apps don't support two-step verification. If you do not use these apps, click **Done** and skip the rest of the steps. |
90 | | -6. If you are using these apps, copy the app password provided and paste it into your application instead of your regular password. You can use the same app password for multiple apps. For more info, [help with app passwords]. |
91 | | -7. Click **Done**. |
| 64 | +- [Manage your two-factor verification method settings](multi-factor-authentication-end-user-manage-settings.md) |
92 | 65 |
|
93 | | -## Use your office phone as the contact method |
94 | | -1. Select **Office Phone** from the drop-down |
| 66 | +- [Manage app passwords](multi-factor-authentication-end-user-app-passwords.md) |
95 | 67 |
|
96 | | -  |
97 | | -2. The phone number box is automatically filled with your company contact information. If the number is wrong or missing, ask your admin to make changes. |
98 | | -3. Select **Contact me** to verify your phone number, and we will call your number. Follow the instructions provided on the screen, then select **Verify**. |
99 | | -4. At this point, you are prompted to set up app passwords for non-browser apps such as Outlook 2010 or older, or the native email app on Apple devices. This is because some apps don't support two-step verification. If you do not use these apps, click **Done** and skip the rest of the steps. |
100 | | -5. If you are using these apps, copy the app password provided and paste it into your application instead of your regular password. You can use the same app password for multiple apps. For more info, see [What are App Passwords](multi-factor-authentication-end-user-app-passwords.md). |
101 | | -6. Click **Done**. |
| 68 | +- [Sign-in using two-factor verification](multi-factor-authentication-end-user-signin.md) |
102 | 69 |
|
103 | | -## Next steps |
104 | | -* Change your preferred options and [manage your settings for two-step verification](multi-factor-authentication-end-user-manage-settings.md) |
105 | | -* Set up [app passwords](multi-factor-authentication-end-user-app-passwords.md) for native device apps that don't support two-step verification. |
106 | | -* Check out the [Microsoft Authenticator app](user-help-auth-app-download-install.md) for fast, secure authentication even when you don't have cell service. |
| 70 | +- [Get help with two-factor verification](multi-factor-authentication-end-user-troubleshoot.md) |
0 commit comments