Setting up Microsoft Authenticator

Microsoft Authenticator is the recommended way to approve sign-ins to your Microsoft 365 account. It is a more secure than SMS and phone call codes as these can be intercepted or redirected.

This guide shows you how to check which sign-in methods you currently have, and how to add Microsoft Authenticator if it’s not already set up. It takes about five minutes.

What you’ll need

• Your smartphone (iPhone or Android)
• A computer with a web browser
• Your HYMS IT account details

Part 1: Check your current sign-in methods

1. On your computer, go to https://aka.ms/mysecurityinfo
2. Sign in with your HYMS IT account and approve the sign-in if asked.
3. You’ll see a list of your Security info. Have a look at what’s there:
   • Microsoft Authenticator listed? Great, you’re (nearly) done. Skip to Part 3 to check it’s your default.
   • Only Phone, Text message or Alternative phone listed? You’ll need to add Authenticator. Carry on to Part 2.
   • Note: If an Alternate email address is not listed, please add one as this is a requirement to be able to change or reset your password.

Part 2: Add Microsoft Authenticator

On your phone

1. Download Microsoft Authenticator from the App Store (iPhone) or Google Play (Android).
2. Open the app and accept the permissions it asks for. Allow notifications, as you’ll need them to approve sign-ins.
3. If the app asks you to add an account, leave it for now and move to your computer.

On your computer

1. On the Security info page, select Add sign-in method.
2. Choose Microsoft Authenticator from the list.
3. Select Next until you see a QR code on screen.

Back on your phone

1. In the Authenticator app, tap + (top right), then choose Work or school account.
2. Choose Scan a QR code and point your camera at the QR code on your computer screen.
3. Your account will appear in the app.

Finish on your computer

1. Select Next. Microsoft will send a test notification to your phone.
2. A number will be shown on your computer screen. Enter that number into the notification on your phone and approve it.
3. Select Next, then Done.

Microsoft Authenticator should now appear in your list of sign-in methods.

Add an alternate email so you can reset\change your password

To reset or change your password yourself, we recommend adding an alternate email address as a sign-in method.

1. On the Security info page, select Add sign-in method.
2. Choose Email from the list.
3. Enter your alternate email address and select Next. A verification code will be sent to that address.
4. Copy the code from the email, paste it into the Verify your email box, and select Next.
5. Select Done.

Part 3: Make Authenticator your default method

1. Back on the Security info page, look for Default sign-in method near the top.
2. Select Change.
3. Choose App based authentication – notification (or similar wording) and confirm.

From now on, when you sign in you’ll get a notification on your phone asking you to approve it. You’ll be shown a number on screen, so enter it in the app to confirm it’s really you.

Part 4: Remove your old phone or SMS method (optional)

Once you’re happy Authenticator is working, you can tidy up:

1. On the Security info page, find the Phone entry.
2. Select Delete next to it and confirm.