AKA MS Account Recovery Guide

Independent guide - not affiliated with or endorsed by Microsoft. We never ask for your password, codes or account details. For official help use Microsoft's account recovery form or support.microsoft.com.

Setting Up Multi-Factor Authentication via aka.ms/mfasetup

Updated October 16, 2026.

Multi-factor authentication (MFA) adds a second check - usually a prompt or code on your phone - on top of your password, so a stolen password alone is not enough to get into your account. The short link aka.ms/mfasetup is a quick way to reach the setup page, but which account type you have changes exactly where you go. This independent guide clears that up and links to Microsoft's own instructions throughout.

Where aka.ms/mfasetup actually goes

As of October 2026, aka.ms/mfasetup redirects to mysignins.microsoft.com/security-info - the Security info page for work or school accounts. That is the same destination as aka.ms/mysecurity. So if you are setting up MFA for an account your employer or school gave you, this link takes you to the right place. If you have a personal Microsoft account, use the personal-account path further down instead.

Set up MFA for a work or school account

When you first sign in and see a "Let's keep your account secure" or "More information required" prompt, your organisation or Microsoft is asking you to add another way to verify your identity. You can set it up two ways:

  1. From the sign-in prompt: select Next and follow the steps.
  2. From a browser: go to the Security info page at mysignins.microsoft.com/security-info, select Add sign-in method, and follow the prompts.

Microsoft's own help points to two common methods: setting up the Authenticator app, and setting up text-message or phone-call verification. If you choose the Authenticator app, you add it from within the app and confirm the registration. Your organisation's IT administrator controls these requirements and can help if you are stuck - admins can even remove the prompt to add a method in some cases.

Set up two-step verification for a personal account

For a personal Microsoft account - Outlook.com, Hotmail, Xbox or Skype - MFA is called two-step verification and lives in a different place:

  1. Sign in to the Security section at account.microsoft.com/security.
  2. Select Manage how I sign in.
  3. Under Additional security, find Two-step verification and choose Turn on.
  4. Follow the instructions. If you set up the Authenticator app you will scan a QR code with your phone.

Microsoft recommends having your password plus contact methods on file, suggesting a usual email, a backup email, and three pieces of security info in total.

Do not lock yourself out

MFA that you cannot complete becomes a lockout. Microsoft is blunt about this: "If you turn on two-step verification, you will always need two forms of identification," and if you lose your contact method, regaining access can take 30 days - or you may lose the account entirely. So before you rely on a single phone:

If you are already locked out, see our step-by-step recovery guide or, for a work or school account, contact your IT administrator.

Stay clear of MFA scams

Because MFA prompts are now part of daily sign-ins, scammers try to trigger them and then phone you to "read back the code". Never share a verification code, approve a prompt you did not start, or hand your recovery code to anyone. Microsoft's warning messages never include a phone number, and its agents will not call you out of the blue. Our note on genuine Windows warnings helps you tell the difference.

Frequently asked questions

What does aka.ms/mfasetup open?

As of October 2026 aka.ms/mfasetup redirects to mysignins.microsoft.com/security-info, the Security info page used for work or school accounts. It is where you add or manage sign-in methods such as the Authenticator app or a phone number.

Does aka.ms/mfasetup work for a personal Microsoft account?

Not directly - it points to the work or school Security info page. For a personal account (Outlook.com, Hotmail, Xbox), turn on two-step verification from account.microsoft.com/security instead.

Which verification method should I choose?

Microsoft recommends the Microsoft Authenticator app for most people, backed up by a phone number or alternate email so you are not locked out if you lose your phone. Having more than one method on file is the key to easy recovery.

What happens if I lose my only verification method?

With two-step verification on, your password alone will not get you in. Microsoft notes recovery can take up to 30 days if you lose your contact method, and you could lose access entirely, so always keep a second method and a recovery code.

Official sources