How to Enable Two-Factor Authentication (2FA) for specific Accounts in Microsoft 365

Two-Factor Authentication (2FA) is one of the simplest yet most powerful tools to protect your accounts from unauthorized access

Here’s a quick and clear guide to implementing 2FA for a single user in Microsoft 365.

Step 1: Sign in to Microsoft 365 Admin Center

1. Go to: https://admin.microsoft.com
2. Use your global admin credentials.

Step 2: Access the Multi-Factor Authentication Settings

1. In the Admin Center, go to Users > Active users.
2. Click Multi-factor authentication (top menu).

Step 3: Search for the Specific Users

Use the search bar to find the user you want to enable 2FA for.

Step 4: Enable 2FA

1. Select the checkbox next to the user’s name.
2. On the right panel, click Enable.
3. Confirm by clicking Enable Multi-Factor Auth in the popup.

The user’s 2FA is now enabled but not yet enforced until setup is complete. Enforcing 2FA is highly recommended to ensure Security.

Step 5: User Sets Up 2FA at Next Login

The next time the user logs in, they will be prompted to configure 2FA. Options include:

• Microsoft Authenticator app (Recommended)
• Phone call
• Text message

Even enabling 2FA for just one user can dramatically reduce risk, especially for accounts with access to sensitive data or administrative privileges