Change or add an MFA method

New phone, new number, or you want to remove an old device.

Everything to do with your sign-in methods lives on one page. Bookmark it: aka.ms/mfasetup.

Go to aka.ms/mfasetup and sign in. You will be asked to approve with your existing method, so do this while you still have your old phone.
To add a method, click Add sign-in method and pick from the list. Phone sends a text message code and makes a good backup.
To set up a new phone, add Microsoft Authenticator again as a new method, following the setup guide on this page with the new device.
To remove an old device, find it in the list and click Delete. Only do this once the replacement is working.
To change which method is used by default, click Change next to Default sign-in method.

Getting a new phone? Set Authenticator up on the new phone before you wipe or hand back the old one. If the old phone goes first you can be locked out of your own email, and getting back in is slow. Turn on cloud backup in Authenticator (Settings → Backup) and add a mobile number as a second method to make this painless.

Already locked out? If your only method was on a phone you no longer have, you cannot fix this yourself. Open a support ticket with us and we will reset your MFA registration so you can set it up again.

Stuck on any step? Open a support ticket with support@diskman.net and we will walk you through it.