OVERVIEW
Explore how MFA helps reduce the risk of identity breaches
- Reduce the risk of password compromise and identity attacks with an extra layer of protection.
- Safeguard high-risk accounts from phishing, password spray, breach replay, and other common threats.
- Ensure only verified users can access sensitive apps and data.
- Balance security with usability by minimizing friction during sign-in.
IMPACT
Why MFA matters
In a world of constant cyberthreats, MFA can significantly reduce risk to your organization by securing identity access and helping you meet compliance requirements.
HOW IT WORKS
Discover the MFA methods built into Microsoft Entra ID
Microsoft Entra ID enables various MFA methods such as texts, biometrics one-time passcodes to help protect your users from identity cyberattacks.
Use your mobile device to approve sign-ins using push notifications, biometrics, or one-time passcodes, and augment or replace passwords with two-step verification.
Replace passwords with external security keys that support Fast Identity Online (FIDO) standards, such as an external USB or near-field communication (NFC).
Enforce phishing-resistant MFA using personal identity verification (PIV) and common access card (CAC). Authenticate using X.509 certificates on smart cards or devices.
Prevent unauthorized access on-premises and in the cloud by signing in using biometric and PIN credentials which are directly tied to a user’s PC.
PLANS AND PRICING
Start implementing MFA with a Microsoft Entra ID plan today
Microsoft Entra ID Free
Multifactor authentication capabilities are included in the free version of Microsoft Entra ID.
Free
User/month
Multifactor authentication capabilities are included in the free version of Microsoft Entra ID.
User/month
This product is not available in your market.
- Microsoft Entra ID Free is included with Microsoft Azure, Microsoft 365, and other Microsoft cloud subscriptions.5
- Support multifactor authentication, unlimited SSO across any SaaS app, basic reports, and self-service password change for cloud users.
- Manage users and groups in the cloud.
- Sync your on-premises directory with Microsoft Entra ID.
- Passwordless authentication
Microsoft Entra ID P1
Secure access with a leading cloud identity and access management solution that includes advanced MFA.
$6.00
user/month, paid yearly
(Annual subscription—auto renews)4
Secure access with a leading cloud identity and access management solution that includes advanced MFA.
(Annual subscription—auto renews)4
This product is not available in your market.
- Includes all capabilities in Microsoft Entra ID Free plus:
- Authentication, single sign-on, and application access
- Multifactor authentication
- Employee self-service
- Administration and hybrid identity
- Passwordless authentication
- Conditional access
- Event logging and reporting
- Advanced security and usage reports
- Verifiable credentials issuance and verification
Microsoft Entra ID P2
Get comprehensive identity protection, risk detection, and adaptive and privileged access controls.
$9.00
user/month, paid yearly
(Annual subscription—auto renews)4
Get comprehensive identity protection, risk detection, and adaptive and privileged access controls.
(Annual subscription—auto renews)4
This product is not available in your market.
- Includes all capabilities in Microsoft Entra ID P1 plus:
- Microsoft Entra ID Protection
- Risk-based conditional access
- Privileged identity management
- Basic entitlement management
- Basic access reviews
CUSTOMER STORIES
See why more than 720,000 organizations use Microsoft Entra ID for MFA
RESOURCES
Dive deeper into MFA
Frequently asked questions
- Multifactor authentication (MFA) adds a layer of protection to the sign-in process. When accessing accounts or apps, users provide additional identity verification, such as scanning a fingerprint or entering a code received by phone.
- Microsoft Entra ID has MFA capabilities built in that help organizations secure access to vital systems. MFA does this by requiring two or more of the following authentication methods:
- Something you know, such as a password
- Something you have, such as a trusted phone or hardware key
- Something you are (biometrics), such as a fingerprint or face scan
- Yes. MFA features are available to Microsoft 365 users at no extra cost. Microsoft 365 E3 includes Microsoft Entra ID P1, and E5 includes Microsoft Entra ID P2, which offer advanced MFA capabilities with Conditional Access for more granular control.
- Microsoft Entra ID’s MFA capabilities support Microsoft Authenticator (with push notifications, passwordless sign-in, and biometrics), passkeys (FIDO2), certificate-based authentication, OATH tokens (hardware and software), SMS text messages, voice calls, and email verification.
- Yes. Microsoft Entra ID supports passwordless authentication including Windows Hello for Business, passkeys (FIDO2 security keys), Microsoft Authenticator app, and Platform Credential for macOS. These methods are more secure and convenient, removing passwords while using something you have (device) plus something you know or are (PIN or biometrics).
- No. MFA is included in your Microsoft 365 subscription as a capability of Entra ID. Microsoft 365 E3 includes Entra ID P1, and E5 includes Entra ID P2—both provide MFA at no additional cost. You can use security defaults for basic MFA or Conditional Access policies for advanced MFA control without purchasing separate licenses.
- Set up MFA using Conditional Access policies (this requires Entra ID P1 or Entra ID P2) or security defaults (available in Entra ID Free). Sign in to the Microsoft Entra admin center to get started and check out the deployment guide for details.
Get started
Get started with Microsoft Entra ID
Strengthen your security with the MFA capabilities built into Microsoft Entra ID.
- [4]Once your paid subscription begins, you have a 7-day cancellation window to receive a prorated refund, only paying for what you use. You may cancel your subscription at any time in the Microsoft 365 admin center. Learn how to cancel your Microsoft 365 subscription. When a subscription is canceled, all associated data will be deleted. Learn more about data retention, deletion, and destruction in Microsoft 365.
- [5]The free edition of Microsoft Entra ID is included with a subscription of a commercial online service such as Microsoft Azure, Microsoft Dynamics 365, Microsoft Intune, Microsoft Power Platform, and others in countries where they are available for sale.
Follow Microsoft Security