What is multifactor authentication, and why is it important?
Multifactor authentication or MFA, also known as two-step login, protects your account by verifying your identity using a second method when you log in.
Cybersecurity attacks are growing more sophisticated and widespread. A strong password is your first line of defense, and a second layer of identity verification enhances security. Multifactor authentication is a standard security practice for universities and other institutions.
Which authentication methods are available at UMass Amherst?
Currently, multifactor authentication systems at UMass Amherst can be configured to use mobile app notifications via the Microsoft Authenticator app, or physical security tokens and code generators.
The Microsoft Authenticator app allows you to securely access your university account even if you don’t have cell service, and is the easiest and most secure option for most campus community members.
Set Up Microsoft Authenticator App
- Install the Microsoft Authenticator app on your mobile device.
Note: If you search your device's app store, the first result may be an ad.
You can also scan the QR code below to get the app.
- Open the Microsoft Authenticator app on your mobile device.
- Tap Continue on the Help improve the app screen.
Note: You do not need to enable the Share additional data option. - Tap Add work or school account.
If you do not see this option, tap the plus icon in the upper right corner, and then tap Work or School account. - Tap Sign in when prompted to scan a QR code or sign in.
- Enter your UMass Amherst NetID email [netID]@umass.edu, and tap Next.
- Enter your password and tap Sign in.
You may be prompted to authenticate with an existing two-step login method. - Tap Continue, and then Register if prompted to set up phone sign-in.
Optimizing your Login Experience
Go to mysignins.microsoft.com/security-info to add or delete authentication methods and to set a default option. Sign in with your UMass Amherst netid@umass.edu and password.
Troubleshooting
What if I don’t have access to my authentication device?
If you need to log in and do not have access to any of your authentication devices, contact the IT Service Desk for assistance.
If you have lost your authentication device, delete it from your enrolled devices at mysignins.microsoft.com/security-info as soon as possible.
What if I don’t have a second device?
Multifactor authentication systems at UMass Amherst can be configured to use codes received via authenticator app or physical security tokens. Contact your area’s IT administrator or contact the IT Service Desk for help setting up a physical security token.
Microsoft Authenticator App Lock
When you respond to a notification in the Microsoft Authenticator app, you do not need to unlock the app to finish logging in. For convenience, you may also turn off the App Lock feature. In the Microsoft Authenticator app:
- Tap the menu button in the upper left.
- Tap Settings.
- Under Security, turn off App Lock.
International Travel Guide
Before You Travel
Prepare your authentication setup before traveling internationally:
The Microsoft Authenticator app lets you access your university account using wifi even if you lose cell service.
- Follow the steps above on this page to configure the Microsoft Authenticator App on the mobile device you will bring with you.
- Check your authentication device settings at mysignins.microsoft.com/security-info to ensure you are not relying on devices you won't have access to.
Alternative Authentication Method for International Use
If your mobile device does not have an internet connection while traveling, you can also sign in using the Microsoft Authenticator app as a one-time password code generator.
- While signing in, on the Approve Sign In Request screen, click I can’t use my Microsoft Authenticator app right now.
If you do not see this option, click Sign in another way, and then Use my password. Then click I can’t use my Microsoft Authenticator app right now. - Click Use a verification code.
- In the Microsoft Authenticator app, tap on your UMass Amherst account.
- Read or copy the number under One-time password code, and type it into the field under Enter code.