NWU requires MFA because a username and password alone are no longer secure enough. MFA adds an extra layer of verification (such as the Microsoft Authenticator app) to protect staff and student accounts, university data, and Microsoft 365 services from phishing, password theft, and unauthorised access.

These are the additional verification methods to set up:

• Microsoft Authenticator app.
• SMS (Phone). Microsoft will retire the Microsoft SMS authentication method on 1 February 2027. NWU is exploring alternative authentication methods to accommodate users who do not have access to a smartphone.
• Passkeys, a phishing-resistant authentication method, will be introduced to users in the coming months as an additional authentication option. 

Follow these steps.

• Sign in to Microsoft 365 using your NWU account.
• Select your avatar, then select View account.
• Select Security info from the left navigation pane to see the account's security information.

• MFA provides added security for your accounts. MFA requires additional validation of login credentials, so even if cybercriminals manage to access a user's password, they'll still need to confirm their identity in various ways.
• Mitigates the risk of unmanaged devices when working remotely. With MFA, organisations reduce exposure from compromised personal devices and less secure connections.
• Enables other security measures to work effectively and can help identify unauthorised access attempts via unexpected authentication prompts.
• Assists with compliance (e.g., POPIA) by strengthening authentication for sensitive data and online documents.