Enable or disable multi-factor authentication

Enable and enforce multi-factor authentication

To require users to use a sign-in verification method whenever they access their accounts, turn on MFA.

1. Sign in to Outlook on the web with your Microsoft 365 email address and password.
2. After you're signed in, go to the multi-factor authentication page.
   Note: If you’re not an admin but try to access the page, you’ll see the error message “You do not have sufficient permission to access this page.”
3. To enable MFA for a specific user, select the checkbox next to their display name. You can select more than one user.
   
4. On the rightmost side of the page, under quick steps, selectEnable.
   
5. In the confirmation window, select enable multi-factor auth, and then select close. MFA will be enabled for the selected user(s).
6. Select the checkbox for the same user(s). Under quick steps, select Enforce.
   
7. Select enforce multi-factor auth, and then select close. MFA will be enforced for the selected user(s).
8. Set up a sign-in authentication method for each user that had MFA enforced (you can send these instructions to each of your users if you don't have access to their accounts):
   1. Sign out of Outlook on the web.
   2. Sign in to the Security info page. If you see a message that more information is needed, select Next.
   3. Set up a sign-in method. You can use this article to walk through the steps.
9. After enabling MFA, you'll receive an app password for email clients using Basic authentication. Make note of it, and then select Done.

You're good to go! MFA has been enabled and enforced for the selcted users. We recommend adding another sign-in method in case you lose access to your primary method.

Disable multi-factor authentication

If you want to stop requiring a verification method for the selected users, you can turn off MFA. Users will only need their email address and password to sign in after MFA is disabled.

1. Sign in to Outlook on the web with your Microsoft 365 email address and password.
   • If you don't have access to the sign-in method, reset your MFA first.
2. After you're signed in, go to the multi-factor authentication page.
3. To disable MFA for a specific user, select the checkbox next to their display name. You can select more than one user.
   
4. On the rightmost side of the page, under quick steps, select Disable.
   
5. In the confirmation window, select yes and then select close. MFA will be disabled for the selected user(s).

Related steps

• Change or delete my multi-factor authentication method
• I can't access my multi-factor authentication method

More info

• To enable MFA for all users in your organization and require additional verification for admins, manage your security defaults.
• When securing your mailbox, you might want to sign out of all devices and reconnect using MFA.
• We also recommend securing your GoDaddy account with 2-step verification.