{"id":1626,"date":"2017-03-22T09:54:28","date_gmt":"2017-03-22T13:54:28","guid":{"rendered":"https:\/\/digitalmediaphile.com\/?p=1626"},"modified":"2017-04-23T08:39:22","modified_gmt":"2017-04-23T12:39:22","slug":"using-ms-authenticator-for-2fa-everywhere","status":"publish","type":"post","link":"https:\/\/digitalmediaphile.com\/index.php\/2017\/03\/22\/using-ms-authenticator-for-2fa-everywhere\/","title":{"rendered":"Using MS Authenticator for 2FA Everywhere"},"content":{"rendered":"<p>Two Factor\/Multifactor Authentication can help keep you safe.<\/p>\n<p>The bad guys are out to get you. They\u2019re phishing in your email, they are using brute force to try to get your password so they can log into your email accounts, your Microsoft Accounts, your Google accounts, Facebook, Twitter, and just about everywhere that you use a password to log in. Having a strong and unique password for every site and account isn\u2019t enough these days. You CAN do more to protect yourself. There PROBABLY ARE baddies trying to break into your accounts right now. It\u2019s a fact of life. Want an example? I was amazed at the number of unique IP\u2019s trying to gain administrative access to the WordPress dashboard on one of my blogs by trying to login through the WordPress interface. And I was horrified.<\/p>\n<p>What can you do to protect yourself? My advice is simply \u2018<strong>if you don\u2019t have 2FA enabled, enable it now if you possibly can\u2019<\/strong>. (And if you are one of the folks that still doesn\u2019t have a smartphone, consider a physical device like <a href=\"https:\/\/www.yubico.com\/start\/\" target=\"_blank\">Yubikey<\/a>\u2019s devices. Microsoft <a href=\"https:\/\/blogs.windows.com\/windowsexperience\/2017\/01\/12\/windows-hello-supports-growing-variety-secured-companion-devices\/#iYSQxkhLXsfbSAOr.97\" target=\"_blank\">blogged<\/a> about using this product for Windows Hello as well.) I won\u2019t cover using these devices in this article, but be aware that if you don\u2019t have a smartphone, you do have an option.) Note that, in some cases,\u00a0you can use a secondary email address as an option to SMS or Yubikey, but it isn&#8217;t as secure and I don\u2019t recommend it.<\/p>\n<p>Two Factor Authentication (2FA) relies on something you know (like a strong password) and something you have (like a cellphone\/smartphone) to help secure your email, online email and social media accounts, etc. There are additional ways to use 2FA, and you can read more about this at <a href=\"https:\/\/en.wikipedia.org\/wiki\/Multi-factor_authentication\" target=\"_blank\">Wikipedia<\/a>, <a href=\"https:\/\/support.microsoft.com\/en-us\/help\/12408\/microsoft-account-about-two-step-verification\" target=\"_blank\">Microsoft<\/a>, and there\u2019s a particularly good write up at <a href=\"https:\/\/www.google.com\/landing\/2step\/#tab=why-you-need-it\" target=\"_blank\">Google<\/a>.<\/p>\n<p><!--more--><\/p>\n<p>And Microsoft has a video:<\/p>\n<figure class=\"wp-block-embed wp-block-embed-youtube is-type-video is-provider-youtube epyt-figure\"><div class=\"wp-block-embed__wrapper\"><iframe loading=\"lazy\"  id=\"_ytid_43538\"  width=\"1290\" height=\"726\"  data-origwidth=\"1290\" data-origheight=\"726\" src=\"https:\/\/www.youtube.com\/embed\/VzZFKS8AfQU?enablejsapi=1&autoplay=0&cc_load_policy=0&cc_lang_pref=&iv_load_policy=1&loop=0&rel=1&fs=1&playsinline=0&autohide=2&theme=dark&color=red&controls=1&\" class=\"__youtube_prefs__  no-lazyload\" title=\"YouTube player\"  allow=\"fullscreen; accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share\" referrerpolicy=\"strict-origin-when-cross-origin\" allowfullscreen data-no-lazy=\"1\" data-skipgform_ajax_framebjll=\"\"><\/iframe><\/div><\/figure>\n<p><!--more--><\/p>\n<p><strong>Get the Microsoft Authenticator App<\/strong><\/p>\n<p>(Before you get started, if you don\u2019t already have a cell phone number attached to your Microsoft Account as a recovery number, set one up. To do this, go to <a title=\"https:\/\/account.live.com\/proofs\/Manage\" href=\"https:\/\/account.live.com\/proofs\/Manage\">https:\/\/account.live.com\/proofs\/Manage<\/a> and sign in. Full instructions on how to do this are <a href=\"https:\/\/support.microsoft.com\/en-us\/help\/12428\/microsoft-account-security-info-and-security-codes\" target=\"_blank\">here<\/a>.)<\/p>\n<p>First step is to get the app for your platform and install it on your smartphone.<\/p>\n<p><a href=\"https:\/\/itunes.apple.com\/us\/app\/microsoft-authenticator\/id983156458?mt=8\" target=\"_blank\">iOS users<\/a> \u2013 if you have an Apple Watch, you get a watch app that lets you quickly approve or deny.<\/p>\n<p><a href=\"https:\/\/play.google.com\/store\/apps\/details?id=com.azure.authenticator&amp;hl=en\" target=\"_blank\">Android App<\/a><\/p>\n<p><a href=\"https:\/\/www.microsoft.com\/en-us\/store\/p\/microsoft-authenticator\/9nblgggzmcj6\" target=\"_blank\">Windows Mobile<\/a><\/p>\n<p>Next open your web browser and go to <a title=\"https:\/\/account.live.com\/proofs\/Manage\" href=\"https:\/\/account.live.com\/proofs\/Manage\">https:\/\/account.live.com\/proofs\/Manage<\/a><\/p>\n<p>Setting up 2FA for your Microsoft account: Setting up MS authenticator for an outlook.com\/hotmail.com (etc.) personal Microsoft Account takes a few steps. Here\u2019s a short video walkthrough of the process. I\u2019ve obliterated personal information and made some edits for privacy, but all the steps are shown.<\/p>\n<p>&nbsp;<\/p>\n<div>\n<div style=\"width: 1224px;\" class=\"wp-video\"><!--[if lt IE 9]><script>document.createElement('video');<\/script><![endif]-->\n<video class=\"wp-video-shortcode\" id=\"video-1626-1\" width=\"1224\" height=\"836\" preload=\"metadata\" controls=\"controls\"><source type=\"video\/mp4\" src=\"https:\/\/digitalmediaphile.com\/wp-content\/uploads\/2017\/03\/msauth-walkthru.mp4?_=1\" \/><a href=\"https:\/\/digitalmediaphile.com\/wp-content\/uploads\/2017\/03\/msauth-walkthru.mp4\">https:\/\/digitalmediaphile.com\/wp-content\/uploads\/2017\/03\/msauth-walkthru.mp4<\/a><\/video><\/div>\n<\/div>\n<p>&nbsp;<\/p>\n<p>After setting up 2FA for an account, alerts will appear on your phone and you will be able to approve or deny each one. In iOS 10, tap the notification to open MS Authenticator. The alert will specify the account (I\u2019ve covered this here for privacy) and you can Approve or Deny.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" style=\"background-image: none; padding-top: 0px; padding-left: 0px; margin: 10px; display: inline; padding-right: 0px; border-width: 0px;\" title=\"approve alert\" src=\"https:\/\/digitalmediaphile.com\/wp-content\/uploads\/2017\/03\/approve-alert.png\" alt=\"approve alert\" width=\"600\" height=\"534\" border=\"0\" \/><\/p>\n<p>I have an iPhone and an Apple Watch, and for me, using Microsoft Authenticator is non invasive and easy. Most of the time, I can approve the 2FA request right on my Apple watch.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" style=\"background-image: none; padding-top: 0px; padding-left: 0px; margin: 10px; display: inline; padding-right: 0px; border-width: 0px;\" title=\"apple watch\" src=\"https:\/\/digitalmediaphile.com\/wp-content\/uploads\/2017\/03\/apple-watch.png\" alt=\"apple watch\" width=\"272\" height=\"340\" border=\"0\" \/><\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p>It\u2019s pretty straightforward to set up Microsoft Authenticator with your Microsoft Account, but it may not be obvious that you can use the MS Authenticator elsewhere. Many online sites document using Google Authenticator, but don\u2019t mention that other products, such as <strong>Microsoft Authenticator<\/strong> will work just as well (or better!). At a 50,000 foot level, you turn on 2FA and enable \u201cuse an app\u201d and select the \u201c+\u201d add account in the app and then take a picture with your smartphone of a QR code to start the process. It is pretty easy to set up and well worth the extra effort. And in most cases, you can designate \u201ctrusted devices\u201d so that you authenticate once (or every 30 days, etc.). For desktop programs like Outlook 2016, you can generate Application Passwords to enter into account settings instead of your regular password (and if the account is already setup, you just replace the password with the App Password).<\/p>\n<p>Setting up 2FA for your Google account (iOS or Android):<\/p>\n<p>Start by going to <a title=\"https:\/\/myaccount.google.com\/signinoptions\/two-step-verification\/enroll-welcome\" href=\"https:\/\/myaccount.google.com\/signinoptions\/two-step-verification\/enroll-welcome\">https:\/\/myaccount.google.com\/signinoptions\/two-step-verification\/enroll-welcome<\/a> and logging in if you aren\u2019t already logged in.<\/p>\n<p>Here\u2019s a short demo walk through of how to use Microsoft Authenticator with your Google Account. And again, this process should work with any online account that lets you set up an authenticator app using a QR code, even if MS Authenticator is not specifically list.<\/p>\n<div>\n<div style=\"width: 1220px;\" class=\"wp-video\"><video class=\"wp-video-shortcode\" id=\"video-1626-2\" width=\"1220\" height=\"840\" preload=\"metadata\" controls=\"controls\"><source type=\"video\/mp4\" src=\"https:\/\/digitalmediaphile.com\/wp-content\/uploads\/2017\/03\/google-msauth.mp4?_=2\" \/><a href=\"https:\/\/digitalmediaphile.com\/wp-content\/uploads\/2017\/03\/google-msauth.mp4\">https:\/\/digitalmediaphile.com\/wp-content\/uploads\/2017\/03\/google-msauth.mp4<\/a><\/video><\/div>\n<\/div>\n<p>If you turn on 2FA for your Microsoft account and any Google accounts, that\u2019s a good start towards increasing your security (and hopefully your peace of mind). And you should turn it on for any online entity that offers it.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Two Factor\/Multifactor Authentication can help keep you safe. The bad guys are out to get you. They\u2019re phishing in your email, they are using brute force to try to get your password so they can log into your email accounts, your Microsoft Accounts, your Google accounts, Facebook, Twitter, and just about everywhere that you use [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"ngg_post_thumbnail":0,"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","enabled":false}}},"categories":[364,360],"tags":[],"blocksy_meta":{"styles_descriptor":{"styles":{"desktop":"","tablet":"","mobile":""},"google_fonts":[],"version":6}},"jetpack_publicize_connections":[],"featured_image_urls":{"full":"","thumbnail":"","medium":"","medium_large":"","large":"","1536x1536":"","2048x2048":""},"post_excerpt_stackable":"<p>Two Factor\/Multifactor Authentication can help keep you safe. The bad guys are out to get you. They\u2019re phishing in your email, they are using brute force to try to get your password so they can log into your email accounts, your Microsoft Accounts, your Google accounts, Facebook, Twitter, and just about everywhere that you use a password to log in. Having a strong and unique password for every site and account isn\u2019t enough these days. You CAN do more to protect yourself. There PROBABLY ARE baddies trying to break into your accounts right now. It\u2019s a fact of life. Want&hellip;<\/p>\n","category_list":"<a href=\"https:\/\/digitalmediaphile.com\/index.php\/category\/latest\/\" rel=\"category tag\">Latest News<\/a>, <a href=\"https:\/\/digitalmediaphile.com\/index.php\/category\/security\/\" rel=\"category tag\">Security<\/a>","author_info":{"name":"Barb","url":"https:\/\/digitalmediaphile.com\/index.php\/author\/barb\/"},"comments_num":"0 comments","jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/pvFKI-qe","jetpack-related-posts":[],"_links":{"self":[{"href":"https:\/\/digitalmediaphile.com\/index.php\/wp-json\/wp\/v2\/posts\/1626"}],"collection":[{"href":"https:\/\/digitalmediaphile.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/digitalmediaphile.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/digitalmediaphile.com\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/digitalmediaphile.com\/index.php\/wp-json\/wp\/v2\/comments?post=1626"}],"version-history":[{"count":0,"href":"https:\/\/digitalmediaphile.com\/index.php\/wp-json\/wp\/v2\/posts\/1626\/revisions"}],"wp:attachment":[{"href":"https:\/\/digitalmediaphile.com\/index.php\/wp-json\/wp\/v2\/media?parent=1626"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/digitalmediaphile.com\/index.php\/wp-json\/wp\/v2\/categories?post=1626"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/digitalmediaphile.com\/index.php\/wp-json\/wp\/v2\/tags?post=1626"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}