Multifactor Authentication

I have talked about the ways to protect yourself from having your accounts taken over before but this month I want to take it further and tell you how to ensure you don’t lose any account access when you get a new phone.

Recently I ran into a customer of mine that just got a new phone and he was not able to get into his business email account with Microsoft. He knew what the password was but since he had a different phone his Microsoft Authenticator app didn’t work for this account. This also happened to me about six months ago when I got a new phone except I was locked out of a few accounts for some companies that I manage email.

The problem is that you can’t automatically move your authenticator entries to a new phone. Microsoft says all you need to do is back up your authenticator into your Microsoft account and then restore it onto your new phone. This is technically true but only works for entries that are connected to your personal Microsoft account. Not for other accounts like your work or business email.

Since this was my customer’s business account the entry was not backed up by his personal account and he was locked out. Luckily, he knew his password, and he was able to contact Microsoft since he is a paying customer, and they helped him reset his authenticator for his business email. He works for himself and is the admin on his account so reaching out to his company admin was not an option. When this happened to me, I was also able to get my authenticator entries back because I set up every option available when I initially set up each account in my authenticator. So, I was able to receive text messages or  codes to alternate email addresses.

Why am I telling you this? The simple fact that I didn’t stop with just the authenticator app and decided to also set up texting or alternate email options for the accounts I manage made it easier for me to get back into those accounts after getting a new phone.

This is an option when initially setting up a new account, but it is also available in your Microsoft account so you can add other options at any time. This is also good if you initially set up your account with an old phone number or email that you no longer have access to because you can login to your account and update with the new phone number or email account. Do these things now instead of waiting until you have a new device and it is too late.

If you are not sure how to update this information or even how to set up an authenticator I can help with this also.


Want to get my computer services updates and reminders directly into your email inbox? Sign up for my FREE Newsletter!

Two Factor Authentication and Authenticator Apps

I got a new phone recently. I have been putting off getting a new one for a couple years because I didn’t want to deal with resetting all of my MS Authenticator entries. I have close to 30 entries in my MS Authenticator because I am an admin for many different companies. I have helped others reset their authenticators before, but it usually doesn’t work easily, and it becomes a pain to fix it. After reading up on how to do it correctly, I decided to back my authenticator up to my Microsoft account and make the change.

It didn’t work out how I had hoped. The only entries that worked on my new phone after restoring my authenticator were my personal accounts. All of the accounts I manage for others did not work and required resetting them.

When I tried to reset them, I realized that I had added all of the recommended methods when I set them all up. I was able to get a text or email to get into the account and then I could easily go in and reset the authenticator. What I thought would be a nightmare turned out to be easy.

Why am I telling you this? My recommendation is, whenever you are setting up two-factor authentication, set up all of the methods they have available. This will allow you to easily get into your accounts even if your authenticator doesn’t work.

I know all of these extra steps are no fun, but they do keep your accounts safe. I recently had a couple of people at one of my companies that were getting text codes every few minutes for their email accounts. Since we had two factor set up, they did not lose access to their emails and the crooks did not get into their email. We were able to log into their accounts, reset their passwords and then sign out all instances so the crooks lost their ability to attempt to get in.

This happens often. Most months I get at least four or five people with this issue. As I have said before, if you don’t have two-factor authentication set up, Login to your accounts and get it going. If you need help with any of this let me know.

Here is a video I made about two-factor authentication.


Want to get my computer services updates and reminders directly into your email inbox? Sign up for my FREE Newsletter!