Action: Configure MFA for the M365 Admin Center by Feb. 3, 2026

Starting Feb. 3, 2026, multifactor authentication (MFA) will be required for users (mostly admins) signing into the Microsoft 365 admin center. Customers who have not set up MFA and prepped their users will need to move quickly to avoid disruption.

MFA adds an important second layer of security to the typical username and password that can reduce the risk of unauthorized access and loss of data. Protecting the M365 admin center is important because it is where customers manage their organization’s M365 subscription, security, licenses, and users.

Global admins or Security admins are required to configure MFA. If MFA is not set up for the M365 admin center, users with access may not be able to sign in or will be prompted to add a verification method, such as using an authenticator app or texting a code. This includes emergency access accounts. 

For more information, see “Announcing mandatory multifactor authentication for the Microsoft 365 admin center” (Microsoft).

To configure MFA, see “Set up multifactor authentication for Microsoft 365” (Microsoft).