Overview
Multi-factor authentication (MFA) adds a second layer of security to your login, on top of your password.
This article explains how MFA works and helps you pick and install an authenticator app.
Already have an app? Skip ahead to set up MFA on your account.
What multi-factor authentication is
MFA means you prove who you are with two things: something you know (your password) and something you have (your phone). Even if someone learns your password, they can't get into your account without the current code from your authenticator app.
We use Time-based One-Time Passwords (TOTP) through an authenticator app, not text-message or email codes, which are easier to intercept. The app generates a new 6-digit code every 30 seconds. When you log in, you enter that code alongside your username and password.
Choose and download an app
You'll need an authenticator app on your phone, tablet, or computer. Google Authenticator and Microsoft Authenticator are both free and work on iOS and Android. Either one works with your account, so pick whichever you prefer.
Microsoft Authenticator: iPhone and Android
Install the app from your device's app store, then come back to the setup screen to scan the QR code.
Set up MFA
Once your app is installed, follow the steps to scan the QR code, enter your first code, and save your backup codes.
Important
From July 1st, 2026 at 9:00 AM PT, MFA will be required for everyone who signs in with a username and password. If you sign in through single sign-on (SSO), this doesn't apply to you.