---
source_url: "https://www.microsoft.com/en-us/security/business/identity-access/microsoft-entra-mfa-multi-factor-authentication?msockid=1f304a21ae1669dc1e335c7aaf50685c&utm_source=openai"
title: "Multifactor Authentication (MFA) | Microsoft Security"
mirrored_at: 2026-08-27T13:03:24.744Z
host: www.microsoft.com
cited_in_42a: true
mirror_canonical: "https://index.42a.ai/www.microsoft.com/en-us/security/business/identity-access/microsoft-entra-mfa-multi-factor-authentication__q__msockid_1f304a21ae1669dc1e335c7aaf50685c__utm_source_openai"
---

> **Original source:** https://www.microsoft.com/en-us/security/business/identity-access/microsoft-entra-mfa-multi-factor-authentication?msockid=1f304a21ae1669dc1e335c7aaf50685c&utm_source=openai

## 

Frequently asked questions

-   [Multifactor authentication (MFA)](https://www.microsoft.com/en-us/security/business/security-101/what-is-multifactor-authentication-mfa) adds a layer of protection to the sign-in process. When accessing accounts or apps, users provide additional identity verification, such as scanning a fingerprint or entering a code received by phone.
    
-   Microsoft Entra ID has MFA capabilities built in that help organizations secure access to vital systems. MFA does this by requiring two or more of the following authentication methods:
    
    -   Something you know, such as a password
    -   Something you have, such as a trusted phone or hardware key
    -   Something you are (biometrics), such as a fingerprint or face scan
    
     
    
-   Yes. MFA features are available to Microsoft 365 users at no extra cost. Microsoft 365 E3 includes Microsoft Entra ID P1, and E5 includes Microsoft Entra ID P2, which offer advanced MFA capabilities with Conditional Access for more granular control.
    
-   Microsoft Entra ID’s MFA capabilities support Microsoft Authenticator (with push notifications, passwordless sign-in, and biometrics), passkeys (FIDO2), certificate-based authentication, OATH tokens (hardware and software), SMS text messages, voice calls, and email verification.
    
-   Yes. Microsoft Entra ID supports passwordless authentication including Windows Hello for Business, passkeys (FIDO2 security keys), Microsoft Authenticator app, and Platform Credential for macOS. These methods are more secure and convenient, removing passwords while using something you have (device) plus something you know or are (PIN or biometrics).
    
-   No. MFA is included in your Microsoft 365 subscription as a capability of Entra ID. Microsoft 365 E3 includes Entra ID P1, and E5 includes Entra ID P2—both provide MFA at no additional cost. You can use security defaults for basic MFA or Conditional Access policies for advanced MFA control without purchasing separate licenses.
    
-   Set up MFA using Conditional Access policies (this requires Entra ID P1 or Entra ID P2) or security defaults (available in Entra ID Free). Sign in to the Microsoft Entra admin center to get started and check out the [deployment guide](https://go.microsoft.com/fwlink/?linkid=2265738) for details.