You are using an unsupported browser. Please update your browser to the latest version on or before July 31, 2020.
You are viewing the article in preview mode. It is not live at the moment.
MFA Change FAQ

Microsoft is retiring text message and phone call verification for multi-factor authentication (MFA). Utah Tech is making the switch early, so you won't be caught off guard.

 

Quick check

  • ✅ Already using Microsoft Authenticator, another authenticator app, or a security key? You're all set. No action needed.
  • ⚠️ Do you get a text message or phone call when you sign in? This change affects you. Set up the Microsoft Authenticator app now. It takes about 3 minutes.

The change

What is MFA?

MFA (multi-factor authentication) means you confirm your identity with something besides your password, such as an app on your phone or a security key. It protects your account even if someone learns your password.

What is changing?

Text message and phone call codes are going away. In their place, you can use:

  • Microsoft Authenticator app (recommended)
  • Another authenticator app, such as Google Authenticator
  • A security key (FIDO2 hardware key)
  • A passkey (optional)

Who is affected?

Only people who currently get a text message or phone call when they sign in. If you already use Microsoft Authenticator, another authenticator app, or a security key, nothing changes for you.

When will this happen?

Starting October 26, 2026, text and phone call options will be removed from a group of accounts each weekday through December 10, 2026. You won't know your exact date in advance. That's why we recommend setting up the app now.

What do I need to do?

Set up Microsoft Authenticator now, before your date. It takes about 3 minutes: Set up Microsoft Authenticator

If you wait, you'll be asked to set up a new method the next time you sign in after your text/phone option is removed.

Do I need to remove my phone number?

No. It will be removed automatically on your scheduled date. Keeping it until then gives you a backup while you get used to the app.


Choosing a method

Which method should I use?

We recommend Microsoft Authenticator. It's free, you approve sign-ins with a tap, and it supports future features like passwordless sign-in and easier password resets.

Tip: Many look-alike "authenticator" apps exist. Download the official Microsoft Authenticator app from the Apple App Store or Google Play.

I don't want to put a work app on my personal phone. What are my options?

You have two good choices:

  • Microsoft Authenticator. Installing it to approve sign-ins does not give Utah Tech control of your phone or access to your photos, messages, contacts, or other personal data. The app only holds your Utah Tech sign-in.
  • A security key. A small USB or tap-to-use key you plug in or tap when you sign in. No phone or app needed. See the next question.

What if I don't have a smartphone?

Use a security key (FIDO2 hardware key). Utah Tech does not provide security keys. Individuals or departments can purchase one here: Yubico Security Key on Amazon

When choosing a key:

  • Make sure it says FIDO2.
  • Match the connector to your computer (USB-A or USB-C). Choose one with NFC if you also want to tap it on a phone.
  • Consider buying two and registering both, so a lost key doesn't lock you out.
  • Order early. Register your key before your text/phone option is removed.

 

Guides:

Can I use Google Authenticator or another app?

Yes. Any standard authenticator app that shows a 6-digit code will work. You'll type the code instead of tapping to approve. Use Google Authenticator or another app

What about passkeys?

Passkeys are supported but optional. If you're comfortable with them, you're welcome to use one. Most people should start with the Authenticator app.


After you set it up

I added the app, but I still get a text when I sign in.

Change your default method:

  1. Go to aka.ms/mysecurityinfo.
  2. Next to Default sign-in method, select Change.
  3. Choose Microsoft Authenticator – notification, then select Confirm.

More help changing your default method

Should I add a backup method?

Yes. A second method (for example, a security key or a second authenticator app) lets you sign in if your phone is lost, dead, or left at home.

I'm getting a new phone. What should I do?

Before you erase or trade in your old phone, install Microsoft Authenticator on the new phone and add your Utah Tech account at aka.ms/mysecurityinfo. Then delete the old phone from your list. If your old phone is already gone, contact the IT Help Desk.

Does the app work when I'm traveling or don't have cell service?

Yes. If your phone is offline, open Microsoft Authenticator and use the 6-digit code shown under your Utah Tech account.

I got a sign-in request I didn't start. What should I do?

Deny it. Someone may know your password. Change your password, then contact the IT Help Desk.


Getting help

I can't sign in. None of my methods work.

Call the IT Help Desk at 435-879-4357 or visit help.utahtech.edu. After verifying your identity, we can give you a temporary code good for 8 hours so you can sign in and set up a new method.

Feedback
0 out of 1 found this helpful