Getting started with MFA Multi-Factor Authentication (MFA)

Multi-Factor Authentication (MFA) is an additional security check used when signing in to an account. The University is introducing MFA for your Microsoft 365 account during August 2026. Instead of signing in with just your password, you'll also be asked to verify your identity using a second method, like an authenticator app. This helps protect your account and personal information, even if someone knows your password.

Where you'll use MFA

You'll only need to use MFA when accessing Microsoft 365 services, including: 

• Outlook 
• OneDrive 
• Office apps and browser versions of Word, Excel and PowerPoint. 

At this stage, you'll continue to sign in to your main Open University (OU) account, StudentHome and module websites as you do now. MFA for your OU account will be introduced later in the year, and we'll contact you before those changes take place. 

What to expect when you first sign in

MFA will be introduced to all students during August 2026. When you first sign in to Microsoft 365 after MFA is enabled, follow the on-screen instructions to set up an additional verification method. The process should only take a few minutes.

You'll be asked to: 

1. Sign in using your Microsoft 365 email address (ending in @ou.ac.uk) and password.
2. Choose a verification method: Microsoft Authenticator app (recommended and most secure), another authenticator app, SMS or voice call. If you choose an authenticator app, you'll be prompted to download it to your mobile device.
3. Follow the on-screen instructions to complete the setup.

Once you've verified your identity, you can continue using Microsoft 365 as usual. 

How often you'll need to use MFA

You won't normally be asked to verify every time you sign in on the same device. You may be asked to use MFA again at certain times, including:

• you're signing in on a new device or browser
• you haven't signed in for a while
• you're accessing certain University services.

How to avoid being locked out

We recommend having more than one verification method set up, for example SMS. This way you'll still be able to verify your identity if you are unable to use your usual method.

Once you've signed in and completed MFA setup:

1. Go to your Microsoft 365 Security info settings.
2. Select Add sign-in method.
3. Choose another verification method.
4. Follow the on-screen instructions.

If you get a new device or lose access to your device in the future, see our Troubleshooting and support guidance.

What MFA helps protect

MFA adds an extra layer of security to help protect:

• your Microsoft 365 account from unauthorised access, even if someone knows your password
• your emails, files and personal data stored in Microsoft 365
• University information and services that you access through your account.