Manage sign in options: https://mysignins.microsoft.com/security-info
- MFA (Multi Factor Authentification) can be configured in different ways:
a) Authenticator App, like KeePassXC, MS-Authenticator, Google Authenticator
- b) SMS on Mobile Phone,
- c) voice computer to classical phone
- The default way is to use the Microsoft Authenticator App.
- But: After choosing 'Microsoft Authenticator App', also an alternative app can be selected (see below).
- Disadvantage of Microsoft Authenticator App: it binds to one device. An app registered Office365 account can only be unlocked with the specific device (or by phone call/SMS) - what is if your phone is broken and App and phone is on the same device?
- To use a different method of Authentication, you can choose 'I want to set up a different method' when setting up your Microsoft Account.
- If you choose 'Phone', enter your mobile or office phone number or private phone number.
Add third party TOTP app
Attention: before you change your second factor: take care that there is always one factor which works! Typically your mobile number is a reasonable fallback during the reconfiguration.
Adding and removing factors: the system might ask again for authentication, even if you are still logged in!
Recommendation: Additional phone numbers
- You'll need this to login to outlook.com (very seldom necessary), teams.microsoft.com (teams will be more often used), zoom.us, KWF, ...
What happens if you forget your mobile at home, or your mobile is not working, or you are at home, ... or whatever. Our recommendation is to configure several additional ways:
office phone number (if you don't have access to your mobile phone)
personal mobile phone number (if you're not in your office)
if exist: classical phone from at home (if your mobile is broken)