Set Up Microsoft Authenticator

Watch this video or select a step to expand and follow the instructions below.

Prior to starting, it is important to install the Microsoft Authenticator application on your device. Please ensure that you have downloaded the correct application, and for convenience, use the following QR codes to access the application store quickly.

Note: The below QR Codes are just for getting the Authenticator app, not for setting up your account's MFA. If your phone can't read the QR code, go to the App Store (for iPhone/iPad) or Google Play Store (for Android) using the links below.

Google Play Store

Direct download link:
https://play.google.com/store/apps/details?id=com.azure.authenticator&hl=en_US&gl=US&pli=1

Apple App Store

Direct download link:
https://apps.apple.com/us/app/microsoft-authenticator/id983156458

Go to https://aka.ms/mfasetup and enter your login details and click Next to continue. (If you are already signed in, please log out and sign back in again or use an incognito window to complete this step)

Click on "Add sign-in method"

Select "Microsoft Authenticator"

Follow the prompted steps to continue setting up Microsoft Authenticator.

Open the Microsoft Authenticator app. You may be prompted to allow notifications such as in the window pictured here. Make sure you allow notifications. 

 
 

A QR code like the one below will appear on your screen. This process creates a unique QR code for you.

With the QR code now visible on your computer screen, return to your phone.

On your phone, tap the “Add Account” button and tap on “Work or school account”. Then scan your unique QR Code

 
 

iPhone

Android

The first time you set up the Microsoft Authenticator app, you might receive a prompt asking whether to allow the app to access your camera. On iPhone or Android, select Allow so the authenticator app can scan the QR code.

iPhone

Android

Point your smartphone camera to the QR code on your computer screen and your account will be added to Microsoft Authenticator.

Your account should be displayed with a code that changes every 30 seconds.

 
 

Click the Next button on your computer screen to continue.

Verify Microsoft Authenticator is working. An approval request will automatically be sent to your Microsoft Authenticator app.

Remember, each time you log in, you'll see new 2-digit numbers. Just type in the numbers you see on your screen.

If your phone is locked, or you are not using the Microsoft Authenticator app, you should receive a notification.

Once you open the app, you will see a sign-in approval request.

 
 

Enter the number that you see on your computer display to your smartphone and Tap “Yes” on your phone screen to authenticate the login request.

Important!
Never approve a sign-in request that you receive unexpectedly. This may indicate that your account has been compromised. Tap Deny if you are not actively trying to sign in to your account, and notify IT support if you have any concerns. On the day you activate your Authenticator, you can get multiple notifications for each device you have (e.g. Computer, Outlook application, Teams application, Smartphone, or tablet).

Click “Next” then “Done” on the last screen to complete the setup.

FAQs

A second step (phone/app/etc.) in addition to your password, to protect against stolen or guessed passwords.

Yes, those terms are often used interchangeably in Microsoft 365.

Yes. Passwords are frequently phished, reused, or leaked in breaches; MFA blocks most of those attacks. 

Online accounts are frequently targeted by phishing attacks or leaked passwords.

MFA:

  • Protects your personal and academic information
  • Prevents unauthorized access to your email and Canvas
  • Helps keep PCC systems secure for everyone

Microsoft Authenticator is the recommended and most secure MFA method. It uses secure push notifications or one-time passcodes generated on your phone.

Microsoft Authenticator is:

  • More secure than text messages or phone calls
  • Faster and easier to use
  • Not vulnerable to SIM-swap or text interception attacks

Phone number verification is available as a backup option, but Authenticator provides the strongest protection.

Yes, and you should. Having at least two methods (for example, app + phone call or app + SMS) makes recovery easier if you lose one.
Yes, you can configure several devices on your Microsoft account via the device management portal. As well, multiple devices of the same type can be added.

If you get a new phone or reinstall the Microsoft Authenticator app, you will need to re-activate the app. You can enroll your new device yourself through the device management portal.

To add a new device, you must first sign in using an MFA method that is already configured on your account. This is why we strongly recommend having at least two MFA methods set up, for example, the Authenticator app plus a phone call or SMS. Having multiple methods makes account recovery much easier if you lose access to one device.

If the device you are replacing was your only MFA method and you no longer have access to it, please contact the IT Help Desk for assistance.

New Help Desk Ticket

Google Authenticator app is an alternative to Microsoft Authenticator.  It generates a 6-digit code used to verify your login instead of a push notification.

If you already have the application installed, you can start enrollment for Multi-Factor Authentication (MFA) at this link:  https://aka.ms/mfasetup

When prompted on the "Keep your account secure" page:

Select "I want to use a different authenticator app"
Select "Next"
When presented with a QR code, open the Google Authenticator app and scan the QR code.

You will usually be prompted for MFA in the following situations:

  • When you sign in on a new device or browser
  • After certain sign-in timeouts
  • If the sign-in activity appears risky or unusual

MFA prompts are reduced on trusted, compliant, or “remembered” devices to help avoid MFA fatigue.

If you are connected to the Pasadena City College (PCC) network, either on campus Wi-Fi or a wired campus computer, you typically will not see MFA prompts.

Use the Authenticator app’s offline verification codes, or a hardware token, rather than SMS/phone calls, whenever possible. 

The Authenticator app can generate one-time codes even offline. For SMS/phone methods, roaming or local connectivity is required. 

No; they see that a verification prompt was sent/approved, not your personal messages or other phone data.

No. Microsoft Authenticator:

  • Does not track your location
  • Does not access your personal files or contacts
  • Is only used to verify your identity during sign-in

MFA will be required for student accounts starting on January 12th 2026. Students are encouraged to set it up early to avoid login interruptions.

Need More Help?

Contact our Help Desk if you have any questions about this process!