# Multi-Factor Authentication (MFA)

This guide provides step-by-step instructions for users on how to reset their multi-factor authentication (MFA) using the Microsoft Authenticator app. It offers a user-friendly walkthrough, ensuring a seamless and secure process to regain access to their accounts while maintaining the highest level of security.

# Setting Up Microsoft Authenticator

When signing in you may see this message.  
[![MFASecurityWarning.png](https://wiki.piedmont.edu/uploads/images/gallery/2025-06/scaled-1680-/asqm9kZDJ6D8mIIT-mfasecuritywarning.png)](https://wiki.piedmont.edu/uploads/images/gallery/2025-06/asqm9kZDJ6D8mIIT-mfasecuritywarning.png)  
This message indicates that you must reconfigure your Multi-Factor Authentication. Follow through the on-screen prompts until you reach a page with a QR Code  
[![MFAqrCode.png](https://wiki.piedmont.edu/uploads/images/gallery/2025-06/scaled-1680-/Cf0Hi001oyAF14Mo-mfaqrcode.png)](https://wiki.piedmont.edu/uploads/images/gallery/2025-06/Cf0Hi001oyAF14Mo-mfaqrcode.png)

Once you reach this page, please proceed to the next steps on your **mobile device**.

[![MFAAppIcon.png](https://wiki.piedmont.edu/uploads/images/gallery/2025-06/scaled-1680-/7I33fMTpVG0tYr4O-mfaappicon.png)](https://wiki.piedmont.edu/uploads/images/gallery/2025-06/7I33fMTpVG0tYr4O-mfaappicon.png)

---

## Delete previous sign-in method

<p class="callout warning">This section is only necessary if you have **previously set up Microsoft Authenticator**.</p>

1. To set up MFA again you must **delete the previous account** to receive MFA notifications.
2. Open **Microsoft Authenticator**
3. Select your `@piedmont.edu` or `@lions.piedmont.edu` account  
    [![MFA_Accounts.jpeg](https://wiki.piedmont.edu/uploads/images/gallery/2025-06/scaled-1680-/nsImhJhuvDdbidi6-mfa-accounts.jpeg)](https://wiki.piedmont.edu/uploads/images/gallery/2025-06/nsImhJhuvDdbidi6-mfa-accounts.jpeg)
4. Select the **gear icon** in the top right corner  
    [![MFAAccountSettings.jpeg](https://wiki.piedmont.edu/uploads/images/gallery/2025-06/scaled-1680-/6xCyY1EBGXS0ED1p-mfaaccountsettings.jpeg)](https://wiki.piedmont.edu/uploads/images/gallery/2025-06/6xCyY1EBGXS0ED1p-mfaaccountsettings.jpeg)
5. Select **Remove Account  
    [![MFAAccountRemove.jpeg](https://wiki.piedmont.edu/uploads/images/gallery/2025-06/scaled-1680-/SucGlYpgAg5YmWCx-mfaaccountremove.jpeg)](https://wiki.piedmont.edu/uploads/images/gallery/2025-06/SucGlYpgAg5YmWCx-mfaaccountremove.jpeg)**
6. Press **Continue** and/or **This app only** to finish removing the account  
    [![MFAAccountDelete.jpeg](https://wiki.piedmont.edu/uploads/images/gallery/2025-06/scaled-1680-/0TabZHpRSA9Pu96N-mfaaccountdelete.jpeg)](https://wiki.piedmont.edu/uploads/images/gallery/2025-06/0TabZHpRSA9Pu96N-mfaaccountdelete.jpeg)

---

## Set up Microsoft Authenticator

1. Open the **Microsoft Authenticator** app on your iOS or Android device 
    - If you do not have Microsoft Authenticator installed, please download it from the **iOS App Store** or **Google Play Store**
2. Open the app, **allow notifications** (if prompted)
3. Select **Add account** from the '+' icon in the upper-right
4. Then select **Work or school account**

<p class="callout info">On your Computer:</p>

5. On the **Set up your account** page, select **Next  
    [![MFASecurityWarning.png](https://wiki.piedmont.edu/uploads/images/gallery/2025-06/scaled-1680-/asqm9kZDJ6D8mIIT-mfasecuritywarning.png)](https://wiki.piedmont.edu/uploads/images/gallery/2025-06/asqm9kZDJ6D8mIIT-mfasecuritywarning.png)**
6. The **Scan the QR code** page appears  
    [![MFAqrCode.png](https://wiki.piedmont.edu/uploads/images/gallery/2025-06/scaled-1680-/Cf0Hi001oyAF14Mo-mfaqrcode.png)](https://wiki.piedmont.edu/uploads/images/gallery/2025-06/Cf0Hi001oyAF14Mo-mfaqrcode.png)
7. Use your mobile device to scan the **provided QR code** with the Microsoft Authenticator app
8. Select **Next** on your computer
9. A 2 digit number is displayed on the computer

<p class="callout info">On your Mobile Device:</p>

9. A notification is sent to your mobile device prompting for a 2 digit number
10. On your mobile device, **enter the 2 digit number, show on the computer,** in the Microsoft Authenticator app
11. Select **Done** on your computer
12. Your security info is now updated to use the Microsoft Authenticator app by default to verify your identity when using two-step verification or password reset.

<p class="callout success">Our Helpdesk Team is happy to provide assistance with this process! Just give us a call at 706-894-4205!</p>

---

## Next Steps

Once you've set up Microsoft Authenticator, we recommend reviewing our documentation for Passkeys which you can find [here](https://wiki.piedmont.edu/books/student-resources/page/mfa-passkeys "MFA Passkeys")!

---

## <span class="s1">**Need Help?**</span>

<p class="callout info">If you encounter an error or need assistance with this guide, please contact the IT Department and include a screenshot with a brief description of the issue.  
  
[**Contact the IT Department Here**](https://wiki.piedmont.edu/books/student-resources/chapter/contact-it "Contact IT!")</p>

# MFA Passkeys

## 1. What is a Passkey?

<p class="callout info">A passkey is a modern, phishing-resistant way to sign in without using a password!</p>

- Instead of something *<span style="text-decoration: underline;">you know</span>* (like a password), a **passkey** uses something <span style="text-decoration: underline;">*you have*</span> (your phone or device) and something <span style="text-decoration: underline;">*you are*</span> (Face ID, Fingerprint, or device PIN)
- The credential is stored securely on your device and is never shared with the website or service that you're signing into. Because of this, passkeys can't be reused, stolen by fake websites, or guessed.
- Passkeys are based on industry security standards (FIDO2). Your device proves to Microsoft that it's really you, without ever sending a password across the internet. 
    - If the site is not legitimate, the passkey simply won't work, and there's nothing for the attacker to steal.
- Your device becomes your key, and your identity stays locked inside it!

[![PasswordlessSecurity.png](https://wiki.piedmont.edu/uploads/images/gallery/2026-02/scaled-1680-/Plyx3vVtrQtRQFmu-passwordlesssecurity.png)](https://wiki.piedmont.edu/uploads/images/gallery/2026-02/Plyx3vVtrQtRQFmu-passwordlesssecurity.png)

- Did you know that passwords are the weakest link in modern security? They are often: 
    - Reused
    - Phished
    - Leaked in breaches
    - Guessed
- Microsoft's goal with passwordless sign-in is to: 
    - **Eliminate passwords as an attack target** - No passwords means nothing to phish, reuse, or brute-force.
    - **Reduce account takeovers and phishing** - Passkeys only work on the real Microsoft sign-in and approved services. Fake sites can't trick your device into handing over a credential.
    - **Make sign-ins faster and simpler** - Approving with Face ID, fingerprint, or a device PIN is quicker than typing passwords and codes.
    - **Improve both security and user experience** - Stronger security without extra steps, fewer account lockouts.

<p class="callout success">Passkeys are part of Microsoft's move to a passwordless future where accounts are protected by your device and biometrics instead of passwords that can be stolen, guessed, or phished</p>

---

## 2. Syncable Passkeys

<p class="callout info">A passkey lets you sign in without typing your password each time. It uses your device's built-in security, such as Face ID, fingerprint, screen lock, or device PIN. </p>

<p class="callout success">We recommend saving your passkey to:   
 - Apple Passwords (if you use iPhone)  
 - Google Password Manager (if you use Android)</p>

---

## 3. Before you Begin

<table id="bkmrk-make-sure-you-have%3A%C2%A0" style="border-collapse: collapse; width: 100%; height: 149px;"><colgroup><col style="width: 50%;"></col><col></col></colgroup><thead><tr style="height: 29.8px;"><td class="align-center" style="height: 29.8px;"><span style="color: rgb(45,194,107);">Make sure you have: </span></td><td class="align-center" style="height: 29.8px;"><span style="color: rgb(224,62,45);">Do **not** create a passkey on: </span></td></tr></thead><tbody><tr style="height: 29.8px;"><td class="align-left" style="height: 29.8px;"><span style="color: rgb(45,194,107);">Your Piedmont email address</span>

</td><td class="align-left" style="height: 29.8px;"><span style="color: rgb(224,62,45);">A public computer</span></td></tr><tr style="height: 29.8px;"><td class="align-left" style="height: 29.8px;"><span style="color: rgb(45,194,107);">Your current password</span>

</td><td class="align-left" style="height: 29.8px;"><span style="color: rgb(224,62,45);">A shared family computer</span>

</td></tr><tr style="height: 29.8px;"><td class="align-left" style="height: 29.8px;"><span style="color: rgb(45,194,107);">You current MFA method</span>

</td><td class="align-left" style="height: 29.8px;"><span style="color: rgb(224,62,45);">A classroom or lab computer</span></td></tr><tr style="height: 29.8px;"><td class="align-left" style="height: 29.8px;"><span style="color: rgb(45,194,107);">A personal phone or computer that **only you use**</span>

</td><td class="align-left" style="height: 29.8px;"><span style="color: rgb(224,62,45);">A friend's phone</span></td></tr></tbody></table>

---

## 4. Enable Passkey Syncing (iOS/MacOS)

1. Confirm your iCloud keychain is enabled 
    - Open **Settings**
    - Select your Name / Apple ID at the top
    - Tap **iCloud**
    - Tap **Passwords and Keychain**
    - Confirm that the setting **Sync this iPhone** or **Sync this iPad** is enabled
2. On Mac: 
    - Open **System Settings**
    - Click your Apple Account
    - Click **iCloud**
    - Ensure **Passwords** is set to **Sync**

---

## 5. Create a Passkey

1. Open a web browser and visit [https://myaccount.microsoft.com](https://myaccount.microsoft.com)
2. Expand **My Account**
3. Select **Security Info**
4. You will be prompted to login using MFA.
5. Once logged in, select **Add sign-in method**
6. Select **Passkey**
7. Select **Next** and follow through the on-screen prompts

---

## 6. Sign in with Passkey

1. When you login using your Piedmont credentials, you will receive a new popup window in place of Microsoft Authenticator   
    [![ChoosePasskey.png](https://wiki.piedmont.edu/uploads/images/gallery/2026-02/scaled-1680-/qrtZRgRDHF2lJUUc-choosepasskey.png)](https://wiki.piedmont.edu/uploads/images/gallery/2026-02/qrtZRgRDHF2lJUUc-choosepasskey.png)
2. Select **iPhone, iPad, or Android device.**
3. Use your mobile device to scan the QR Code on your computer, select **Sign in with Passkey**  
      
    [![PasskeyQRCode.png](https://wiki.piedmont.edu/uploads/images/gallery/2026-02/scaled-1680-/eb9Y1zI9M21z71dK-passkeyqrcode.png)](https://wiki.piedmont.edu/uploads/images/gallery/2026-02/eb9Y1zI9M21z71dK-passkeyqrcode.png)
4. On your mobile device, a message will appear "**Sign in to login.microsoft.com" on the other device with your passkey for "@piedmont.edu" saved in Passwords?**
    - Choose **Use Passkey**
5. Your mobile device will prompt for Face ID or biometrics.

---

## 7. Sign in using Microsoft Authentiactor

1. In some cases you may need to use the original MFA through the Authenticator app, to do so, select the 'X' or 'Cancel' button and select **Sign in Another way  
    [![BypassPasskey.png](https://wiki.piedmont.edu/uploads/images/gallery/2026-02/scaled-1680-/eo9mZFNsO5k2ZFEe-bypasspasskey.png)](https://wiki.piedmont.edu/uploads/images/gallery/2026-02/eo9mZFNsO5k2ZFEe-bypasspasskey.png)[![UseAuthenticator.png](https://wiki.piedmont.edu/uploads/images/gallery/2026-02/scaled-1680-/zNYzTG0QkBT2T8bi-useauthenticator.png)](https://wiki.piedmont.edu/uploads/images/gallery/2026-02/zNYzTG0QkBT2T8bi-useauthenticator.png)**
2. Select **Approve a request on my Microsoft Authenticator app** to complete original MFA steps.   
      
    [![OriginalMFA.png](https://wiki.piedmont.edu/uploads/images/gallery/2026-02/scaled-1680-/CZTJJNAo4Mox8qqZ-originalmfa.png)](https://wiki.piedmont.edu/uploads/images/gallery/2026-02/CZTJJNAo4Mox8qqZ-originalmfa.png)
3. Follow the on-screen instructions to approve the Authenticator request.

---

## 8. What happens when you get a new phone? 

- If your passkey was saved to Apple Passwords or Google Password Manager, it may become available again after you: 
    1. Sign into your new phone with the same Apple or Google account
    2. Enable iCloud Password or Google Password Manager sync
    3. Set up Face ID, fingerprint, screen lock, or device PIN
    4. Login to your Lions email using [https://www.office.com](https://www.office.com) or [selfservice.piedmont.edu ](https://selfservice.piedmont.edu)
    5. Select the saved passkey when prompted

<p class="callout warning">If your passkey does not appear, you will need to [Contact IT ](https://wiki.piedmont.edu/books/student-resources/chapter/contact-it "Contact IT!")for assistance. </p>

---

## 9. Security Notes

- Your passkey is only as secure as your Apple or Google account. Use a password manager!
- Use a strong password on your Apple or Google account. Do not reuse passwords!
- Keep account recovery options up to date on your Apple or Google account
- Never share your phone PIN, Apple password, Google password, or Device unlock code
- Do not save passkeys on shared or public devices

---

## 10. Next Steps

Review what you can do to help keep Piedmont secure [here](https://wiki.piedmont.edu/books/student-resources/page/keep-piedmont-secure "Keep Piedmont Secure!")!

---

## <span class="s1">**Need Help?**</span>

<p class="callout info">If you encounter an error or need assistance with this guide, please contact the IT Department and include a screenshot with a brief description of the issue.  
  
[**Contact the IT Department Here**](https://wiki.piedmont.edu/books/student-resources/chapter/contact-it "Contact IT!")</p>

# Lost Phone / Can't Access Account

## 1. Can't login due to MFA

<p class="callout warning">If you lost or replaced your phone or no longer have access to your MFA method, you may not be able to Sign in to your Piedmont account. </p>

<p class="callout info">This guide explains how to manage your sign in methods so that you can access your account. </p>

- This guide is helpful when: 
    1. You lost your phone
    2. You got a new phone
    3. Your phone was stolen
    4. Your phone was reset or wiped
    5. You deleted Microsoft Authenticator
    6. Microsoft Authenticator no longer show your Piedmont account
    7. You changed phone numbers
    8. You do not receive a text field to enter the 2-digit MFA number in Microsoft Authenticator
    9. You cannot access any of your sign-in methods

---

## 2. Manage your sign in Methods

<p class="callout warning">You can only complete this section if you have access to at least 1 MFA method. (Passkey or Authenticator) </p>

- You can add or remove MFA sign in methods by visiting [https://myaccount.microsoft.com](https://myaccount.microsoft.com) and logging in using your Piedmont email. 
    1. Visit [https://myaccount.microsoft.com](https://myaccount.microsoft.com) and login using your Piedmont email
    2. In the left column, expand **My Account**
    3. Select **Security Info**
    4. You will be prompted to login using MFA <p class="callout danger">If you do not have access to your MFA method you will be required to contact the IT Department so that we may assist you. </p>
    5. Here you can manage your Sign-in Methods. If you got a new phone, you would need to delete the method labeled 'Microsoft Authenticator'.
    6. Once deleted, select **Add Sign-in Method** and follow the on-screen instructions to add the Microsoft Authenticator App to your new device.
    7. You can find instructions for setting up Microsoft Authenticator [here](https://wiki.piedmont.edu/books/student-resources/page/setting-up-microsoft-authenticator "Setting Up Microsoft Authenticator")!

---

## 3. Submit a Ticket to IT

<p class="callout warning">If you cannot access your MFA methods you must submit a ticket to IT so that we may assist you in accessing your account again. </p>

- When submitting a ticket, please include 
    1. Your Full name
    2. Your Piedmont Email address
    3. a brief explanation of what happened
    4. Any screenshots of errors that you may receive.

---

## <span class="s1">**Need Help?**</span>

<p class="callout info">If you encounter an error or need assistance with this guide, please contact the IT Department and include a screenshot with a brief description of the issue.  
  
[**Contact the IT Department Here**](https://wiki.piedmont.edu/books/student-resources/chapter/contact-it "Contact IT!")</p>