How do I change my Office 365 MFA / account recovery options?

Overview

Office 365 allows users to set up multiple authentication methods – connected email address, phone numbers, and mobile devices which you can use as second authentication factors, or to recover your account if you've forgotten your password. At MSU Denver, these options are initially configured with the email and phone number used when you applied as a student or employee; however, these options can be changed at any time.

Follow these instructions if you are updating your initial account recovery options, transferring your MFA settings to a new device, or changing your primary authentication method.

Before you begin...

This article only applies to individuals who have completed their 'First Time Log-in', if you have never logged into your account before please click here to be directed to the appropriate support article.

You will need to be able to log in to your MSU Denver Office 365 account to follow these steps. If you are unable to use your primary method of MFA, you will be able to follow these steps by utilizing your secondary method of MFA (such as a phone call or one-time password code). If you are unable to log in, please contact the ITS Service Desk for login support.

Instructions

1. Navigate to email.msudenver.edu.
2. Log in using your MSU Denver email address and password. You will then be prompted to authenticate with your primary form of MFA.
   Note: If you are unable to use your primary form of MFA, please proceed to the Authentication using Backup MFA Methods section.
    
3. Click the bubble in the top-right corner of the window where either your picture or your initials are displayed.
4. From the menu that opens, click View Account.
   
    
5. On the next page, find the Security info panel and click Update info.
   
    
6. You will see a list of authentication methods that have already been set up on your account. To add a new method, click Add sign-in method. To change an existing method, click Change next to its name.
   • You can also delete methods by clicking Delete next to a method's name, but please note you must have at least one account recovery method at all times.
   • If you are setting up the Microsoft Authenticator App, we suggest following the instructions at How do I set up MFA for the first time using the Authenticator App?
     
     
7. In the screen that follows, provide your desired contact method. Once you have done so, click Next.
8. Check the device or account you provided for a code.
9. Enter that code into the Enter code box.
10. Click Next.
    
     
11. (Optional) If you want to set this as your default authenticator, click Change next to "Microsoft Authenticator: notification - Change:". You will be given a drop-down menu of all your available methods. Select the one you just set up, then Click Confirm.
    

Authentication with Backup MFA methods

To authenticate using a backup MFA method:

1. Log in using your MSU Denver email address and password.
2. When prompted to authenticate with your primary MFA method. Click I can't use my Microsoft Authenticator app right now.
   
    
3. You will then see your alternate methods to verify your identity.
   
    
4. If you're able to verify your identity with one of your alternate methods and successfully log in, please proceed from Step 3 in the previous section.
   
   If you're unable to use your alternate MFA options, please contact the ITS Service Desk for login support.

Result

Once you enter the verification code, you will see a prompt in green saying verification was successful. You can now use the method you provided as a second authentication factor, or to recover your account.