How do I set up MFA?
Short answer
It depends on the platform. For most organizations, the best setup is Microsoft Entra ID with single sign-on and Conditional Access, so one strong sign-in protects Microsoft 365 and the other apps your people use. For any app outside that, look for 2FA or MFA in its settings, profile, or security section.
MFA (multi-factor authentication, sometimes called 2FA) asks for something beyond a password, such as an approval in an authenticator app, before anyone can sign in. It is one of the most effective protections against stolen passwords.
Start with Microsoft 365
If your organization uses Microsoft 365, set up MFA in Microsoft Entra ID instead of app by app. With single sign-on, one protected sign-in covers Microsoft 365 and the business apps connected to it, and Conditional Access lets you require MFA everywhere, with stronger checks for administrators.
If you bought Microsoft 365 through GoDaddy
We often find GoDaddy-provisioned Microsoft 365 accounts that aren't set up the best way, which can limit the security settings available to you. Moving away from GoDaddy is usually the first step.
Everything else
For web applications that don't use single sign-on, look in the app's settings, profile, or security section for "two-factor authentication," "2FA," or "MFA," and turn it on. Where the app offers a choice, use an authenticator app instead of text messages.