How to Set Up Microsoft Authenticator (MFA) in About Five Minutes

Multi-factor authentication adds one quick step to sign-in that stops the overwhelming majority of account takeovers. Here's how to set it up on your phone in about five minutes — no jargon, no IT degree required. Print it, or send it to whoever's stuck.

What this is (and why it's worth five minutes)

MFA means that signing in takes two things instead of one: your password, and a tap on your phone. Even if someone steals your password, they can't get in without the phone in your pocket. You set this up once. After that, logging in is just a quick "Approve."

Before you start, have two things in front of you: your computer and your phone.

Step 1 — Get the app on your phone

1. On your phone, open the App Store (iPhone) or Play Store (Android).
2. Search for Microsoft Authenticator and install it. It's free — look for the blue lock icon published by Microsoft.
3. Open the app. If it asks, tap Allow for notifications. Don't add an account yet — you'll do that in Step 3.

Step 2 — Start setup on your computer

1. On your computer, go to aka.ms/mfasetup. (If you're signing in to email or Teams and it prompts you for "more information," that's the same thing — just follow along.)
2. Sign in with your work email address and password.
3. When you see "More information required," click Next.
4. It says "Start by getting the app." You already have it, so click Next, then Next again. A QR code (a square barcode) appears on your screen.

Step 3 — Connect your phone to your computer

1. On your phone, open Microsoft Authenticator.
2. Tap the + in the top-right corner → choose Work or school account → Scan a QR code. Allow the camera if it asks.
3. Point your phone's camera at the QR code on your computer screen.

Step 4 — Confirm it works

1. Your computer shows a two-digit number. Type that number into the app on your phone and tap Yes / Approve.
2. You'll see "Success." Click Next, then Done. That's it — you're set up.

From now on

The next time you sign in, a notification pops up on your phone. Tap Approve (or type the number it shows you). No codes to memorize, nothing to carry beyond the phone you already have.

If you get stuck

• The QR code won't scan? Click "Can't scan?" or "I want to set up a different way" on the computer and follow the short text-code instructions instead.
• You'd rather get a text message than use the app? On the "More information required" screen, choose "I want to set up a different way" → Phone, and enter your mobile number to receive codes by text. The app is more secure and more convenient, but text works too.
• Got a new phone? Your old setup doesn't move over automatically. Ask your IT administrator to reset it — it takes about two minutes.
• You manage a team? The single most common reason people get stuck is doing Step 1 and Step 3 out of order. Install the app first, then scan.

A note for healthcare teams

If you run a clinic or a research site, "turn on MFA for everyone" is the single highest-impact security change you can make — and it's a requirement auditors and cyber-insurers increasingly expect. The hard part is never the technology; it's getting every last account, including the shared front-desk login, actually enrolled without derailing the workday. That rollout — done cleanly, with a fallback for the people who struggle — is the kind of thing we handle for healthcare and clinical-research practices every day.