Secure your NWU account
Microsoft 365
Multi-Factor Authentication
Protect your NWU Microsoft 365 account with an additional layer of security. Microsoft Authenticator push notifications are the recommended authentication method for most users. As an NWU user, you may already have a multi-factor authentication (MFA) method set up to access the Microsoft 365 environment. Please take note of the following important information:
If you use SMS/Phone as your multi-factor authentication (MFA) method for Microsoft 365, please take note that Microsoft will retire and disable SMS authentication from 1 February 2027.
Microsoft SMS authentication is being retired
Users who currently receive verification codes by SMS should register Microsoft Authenticator and move to the recommended authentication method before the retirement date.
1 February 2027
Get started
Set up and manage MS 365 MFA
Use these resources to configure Microsoft Authenticator, review your authentication methods or get assistance.
Guide MS 365 MFA Documentation
Follow the step-by-step instructions to configure Microsoft 365 Multi-Factor Authentication.
App setup Microsoft Authenticator
Watch the setup video and configure Microsoft Authenticator on your mobile device.
Support Lost phone or changed number?
Contact IT if you no longer have access to the device or mobile number associated with your MFA registration.
Microsoft 365 MFA help and FAQs
Find answers about Microsoft Authenticator, verification methods, TOTP codes, Huawei devices and upcoming authentication changes.
How can I check my MS 365 MFA methods?
- You can check MFA 365 methods by directly going to Microsoft Security Info .
What verification methods can I use?
The main Microsoft Authenticator methods available for MS 365 MFA are:
- Microsoft Authenticator Push Notifications – the recommended method for most users.
- Microsoft Authenticator Verification Codes (TOTP) – use the six-digit code generated in the app.
What should I do if I use an older Huawei phone?
Some older Huawei devices may not always receive Microsoft Authenticator push notifications reliably because of device limitations, battery optimisation settings or notification restrictions.
You can still use Microsoft Authenticator by using the Verification Code (TOTP) method.
The Authenticator app generates a six-digit code directly on your phone. You can enter this code when prompted during sign-in.
What is a verification code (TOTP), and when should I use it?
A verification code, also known as a Time-Based One-Time Password (TOTP), is a secure six-digit code generated by an authenticator application.
- Open Microsoft Authenticator.
- View the current six-digit code.
- Enter the code when prompted during sign-in.
The code changes automatically every 30 seconds.
What should I do before SMS authentication is retired?
If you are using the Phone/SMS method to do multifactor authentication follow the steps in the Setup Guide to install and use the Microsoft Authenticator App. The Phone/SMS method will be disabled before the retirement date.
Why is MS 365 Multi-Factor Authentication required at NWU?
A username and password alone are no longer enough to protect an online account.
MFA adds an additional verification step to help protect NWU staff and student accounts, university information and Microsoft 365 services against phishing, password theft and unauthorised access.
What are the advantages of using MS 365 MFA?
- Adds an additional layer of protection even if someone obtains your password.
- Helps reduce the security risk associated with compromised personal or unmanaged devices.
- Unexpected authentication prompts can help alert you to attempted unauthorised access.
- Strengthens authentication for sensitive university data and online documents.
What should I do if I lose my phone or change my mobile number?
If you no longer have access to the device or mobile number associated with your MFA registration, contact the NWU IT Service Desk for assistance.