MFA gives you an additional layer of security, over and above your username and password when working online
Having more than one sign-in method enables you to verify your identity should you forget your password. Also, if your password is compromised by a malicious third party, they won't be able to access protected resources without providing secondary authentication, via:
Find out why the University has applied MFA, the benefits, and how to get set up
To set up MFA or add additional sign-in methods:
Please note: To use the University’s VPN you must also set your MFA default sign-in method. For guidance on how to do this, see our Setting up VPN on your device page.
You can add as many sign-in methods as you like. Some methods are more suitable for particular activities. Find out which methods you should use.
We recommend you use the Microsoft Authenticator App as it is suitable for all scenarios, and that you have at least two methods set up. For example, adding both the phone and Authenticator App methods will mean you can still verify your identity and access your account if you later change your phone but retain your number.
| Methods available | Suitable for M365 authentication and logging into University systems | Suitable for VPN authentication | Suitable for resetting your password |
|---|---|---|---|
| Microsoft Authenticator App (most secure) | Yes | Yes | Yes |
| Phone (text / SMS) | Yes | Yes | Yes |
| Alternative phone | Yes | Yes | Yes |
| - | - | Yes | |
| Security questions | - | - | Yes |
| Office phone | - | - | - |
If you plan to access your University account overseas, mobile-related verification methods such as a text message may incur roaming charges. Therefore, we recommend you use the Microsoft Authenticator App, using code verification or push notifications when connected to a Wi-Fi hotspot.
Having at least two sign in methods set up means if your first method fails, you can still verify your identity using your second method.
How your personal data is held, used and kept secure
The personal details you share are used solely for the purpose of identity verification and authentication.
Find out how to use the Microsoft Authenticator app to back up and recover your account credentials
The Microsoft Authenticator app backs up your account credentials and related app settings, such as the order of your accounts, to the cloud. You can then use the app to recover your information on a new device, potentially avoiding getting locked out or having to recreate accounts.
Find solutions to the most common problems with MFA
If you are experiencing problems with MFA, such as:
Or if you have privacy concerns.
Where to find more information and assistance
You can find out more about Multi-factor Authentication by visiting the What is: Multi-factor Authentication guidance on the University of Bath – Learning Pathways site.
Contact the IT Service Desk if you: