MS Authenticator

Microsoft provides Multi-Factor Authentication (MFA) service to protect users against account takeover and data theft. This additional identification step blocks hackers from logging in your account even when your password is compromised or leaked. You will also be notified when someone tries to log in with your password, providing an additional level of protection to secured login.

Using the Microsoft Authenticator app on your mobile device as a security token is the most convenient way to complete verification. You can choose to approve a request on the app for a quick log in, or use a verification code when your device has no internet connection.

Note: For new staff, please change your password on The Portal before signing in to Office 365 services.

(If you cannot view the video, please click here to open the video.)

  1. Install the Microsoft Authenticator app on your mobile device.
  2. Open a browser on your computer and sign in to O365 at
  3. Sign in with your EdUHK email address ( and password, then click "Next".
  4. When you see the following screen, click “Next”.
    Office 365 sign in

  5. Open the drop-down list and choose "Authenticator app", then click "Add".
    Choose to use Authenticator app

  6. When you see the following screen, open the Microsoft Authenticator app on your device.
    MFA configure with QR code

  7. Click the + button in the top right-hand corner and choose “Work or school account”.
    Add account on Authenticator app Add account on Authenticator app
  8. When prompted, choose "Scan QR code".
    Choose to scan QR code

  9. Then scan the QR code on the browser with your device. If you cannot use your phone camera, click "Can't scan image?" to enter the 9 digit code and the URL instead.
    (Note: For iPhone users, you may need to change the app permission to scan the QR code: Settings > Authenticator > Camera)
    Scan QR code from Authenticator app icon

  10. A 6 digit code will be shown and your account is added.
    Authenticator app icon

  11. Click "Next" and then click "Done" on your computer.
  12. A notification is sent to the Microsoft Authenticator app on your device.
    Authenticator app icon

  13. When completed, click "Next".
  14. You will receive a notification on your device.
    Authenticator app icon

  15. Tap on the notification, enter the number displays and click “Yes” for verification.
    Authenticator app icon

  16. When you see the following screen on your computer, click "Next".
    Notification Approved
  17. An app password will be shown. Copy and save the app password in case some of your devices or apps do not support MFA. For details, please see FAQ: How can I create an app password if my device doesn't support MFA?.
    Authenticator app icon

  18. From now on, you will receive notification from the Microsoft Authenticator app when you sign in. Simply Tap "Approve" on your device to complete verification.

Note: If you want to complete verification with a phone call, choose "Authentication phone" in Step 5. Then choose the correct country code (e.g. Hong Kong +852) and enter your office phone number or mobile number.