What is Two-Step Login? Multifactor Authentication (MFA)

Two-step login protects your account by verifying your identity using a second device when you log in.
UMass Amherst currently uses Microsoft two-step login for most services.

Traveling? Check our tips here to avoid issues accessing UMass Amherst services while abroad. 

---

Get the app for the easiest and most secure login experience.

Log in securely with a quick app notification.

1.  Install the Microsoft Authenticator app on your mobile device in your phone's app store.
   Alternatively, scan the QR code below with your mobile device or click to download the app.
   ⚠️Note: If you search the app store, the first result may be an ad.
   
2. On your mobile device, open the Microsoft Authenticator app.
3. On the Help us improve Microsoft Authenticator screen, tap Accept to continue.
   Note: You do not need to enable the Improve the app by sharing your app use data option.
4. On your mobile device, tap Add work or school account.
   If you do not see this option, tap the plus icon in the upper right.
   
5. If prompted to Scan a QR code or sign in, tap Sign in.
6. If you are prompted about App Lock, tap Ok to continue.
7. Enter your UMass Amherst NetID email [netID]@umass.edu, and tap Next.
8. Enter your password and tap Sign in.
   Note: You may be prompted to verify your identity using an existing two-step login option, such as a text message code, or an older authentication app.
9. If prompted to set up phone sign-in, tap Continue, and then Register.

 

---

 

Log In Faster: Choose a Default Two-Step Login Device

Setting your default two-step login device will speed up your sign-in process.

1. On a laptop or desktop computer, go to mysignins.microsoft.com/security-info.
2. Sign in with your UMass Amherst NetID email [netID]@umass.edu and password.
   Note: If you are changing settings for a subsidiary account, make sure to sign in with that account's netID@umass.edu and password.
3. Under Security Info, click Set default sign-in method 
   (or Change next to the line displaying your current default sign-in method).
4. From the dropdown menu, select your preferred authentication method and click Confirm.

 

---

 

Add Two-Step Login Device: Cell or Landline Number

The Microsoft Authenticator app is the easiest and most secure way to log in, and is the most likely to work even if you don't have phone service.
If you cannot use the app, or want to add more devices as backup options, follow these steps. 

1. On a laptop or desktop computer, go to mysignins.microsoft.com/security-info.
2. Sign in with your UMass Amherst NetID email [netID]@umass.edu and password.
   Note: If you are changing settings for a subsidiary account, make sure to sign in with that account's netID@umass.edu and password.
3. Under Security Info, click Add method. 
   
4. In the Add a method dialog box, choose Phone, Alternate phone, or Office phone and click Add.
   
5. In the Phone dialog box, enter your phone number.
6. Text me a code is checked by default (as shown below). If you are using a landline phone, make sure Call me is checked. Click Next to continue. 
   
7. Enter the 6 digit code you receive either via text message or phone call and click Next. 
8. If you are adding a phone via phone call, you may need to press # on the phone to confirm.