MyAccount: Updating Security Info for password recovery and MFA verification

Summary

This article explains how to add and manage password recovery and MFA verification methods.  We recommend you have at a minimum the Microsoft Authenticator App (for MFA), a cell phone (for MFA and password recovery), and a personal email address (for password recovery).  Use this process to keep your sign-in methods up-to-date as you change devices, phone numbers, email addresses, etc.  Updating your security info will help ensure you are able to access your accounts when you need them.

Body

Summary

This article explains how to add and manage password recovery and MFA verification methods. We recommend you have at a minimum the Microsoft Authenticator App (for MFA), a cell phone (for MFA and password recovery), and a personal email address (for password recovery). Having these three methods ensures that you are have continued access to your accounts in the event of travel or a situation where you do not have wifi or cell phone service.

Use this process to keep your sign-in methods up-to-date as you change devices, phone numbers, email addresses, etc. Updating your security info will help ensure you are able to access your accounts when you need them.

For an overview, we recommend this short video, also available at https://youtu.be/k0oiKQK3LjQ

 

Security Info Sign-In Method Comparison

Green highlighted items are the minimum recommended to ensure access to your accounts. We encourage you to add as many additional methods as you can.

Method Password Recovery MFA Sign-In Verification Considerations
Microsoft Authenticator App No Yes Works without cell/wifi coverage, even internationally. Set up fresh on any new device. MFA only.
Phone (SMS Text or voice call) Yes Yes Convenient, but requires cell coverage to get code. Works on new cell phone with same registered phone number. Both MFA and password reset.
Office Phone (voice call) No Yes Easy to use - just press # when prompted. MFA only.
Alternate Phone (voice call) No Yes Easy to use - just press # when prompted. MFA only.
Email (Alternate/Personal Email) Yes No Essential for password reset, especially if cell phone isn't available. Password reset only.
Security Key (YubiKey) No Yes Works completely offline. MFA only.
App Password (rare) No Yes  

How-To

 

Task: To Access your Security Info sign-in methods

 

Instructions

Step 1 - In a web browser, go to: https://myaccount.microsoft.comand sign in if necessary.

Step 2 - Click on UPDATE INFO in the Security info tile

Security info box with "UPDATE INFO" link

 

Step 3 - If you've previously configured any sign-in methods, they will be listed here.

Security Info list, personal info blurred

 

Outcome

You have accessed your Security Info sign-in methods.

Back to top

 

Task: To Add a Sign-In Method

 

Instructions

Step 1 - Access your Security Info sign-in methods.

Step 2 - Click Add sign-in method. We strongly advise that you configure as many as you can.

Security info with list of MFA sign-in methods and link to "Add sign-in method"

 

Step 3 - Click the Choose a method drop down. You'll have many options. Choose one and click Add to set it up.

 

Step 4 - Go through the on-screen instructions for your chosen method. Repeat steps 3-5 to add additional methods. See Specific Method Instructions below.

Step 5 - When finished, simply navigate away from the Security Info page. Now that you have verification methods set up, you may need to authenticate using one of them to log into your USNH account or to access the Security Info page again.

 

Outcome

You have set up at least two sign-in verification methods for Multi-Factor Authentication (MFA). We recommend the Microsoft Authenticator App plus as many others as you can. Email does not work for MFA.

You have set up at least two recovery sign-in methods for Self-Service Password Reset (SSPR). Email and Phone (mobile phone) are the only options for password recovery.

Back to top

 

Task: To Change a Sign-In Method

 

Instructions

Step 1 - Access your Security Info sign-in methods.

Step 2 - To change a method, click the "Change" link if available.

Security info with list of MFA sign-in methods and "change" links marked

 

Step 3 - Go through the on-screen instructions for your chosen method. Repeat as necessary. See Specific Method Instructions below.

Step 4 - When finished, simply navigate away from the Security Info page. You may need to authenticate using one of your sign-in methods to log into your USNH account or to access the Security Info page again.

 

Outcome

You have changed your verification and recovery sign-in methods for Multi-Factor Authentication (MFA) and Self-Service Password Reset (SSPR). Be sure you maintain the minimum of two methods for both MFA (recommend the Microsoft Authenticator App plus another non-email method) and password recovery (email and mobile phone are the only options).

Back to top

 

Task: To Remove a Sign-In Method

 

Instructions

Step 1 - Access your Security Info sign-in methods.

Step 2 - To remove a method, click the "Delete" link.

Security info with list of MFA sign-in methods and links to "Delete" methods

 

Step 3 - Go through the on-screen instructions for your selected method. Repeat as necessary.

Step 4 - If necessary, Add additional sign-in methods to be sure you maintain the minimum of two methods for both MFA and password recovery (email or cell phone only).

Step 5 - When finished, simply navigate away from the Security Info page. You may need to authenticate using one of your remaining sign-in methods to log into your USNH account or to access the Security Info page again.

 

Outcome

You have removed old verification and recovery sign-in methods for Multi-Factor Authentication (MFA) and Self-Service Password Reset (SSPR). Be sure you maintain the minimum of two methods for both MFA (recommend the Microsoft Authenticator App plus another non-email method) and password recovery (email and cell phone are the only options).

Back to top

 

Specific Method Instructions

Microsoft Authenticator App

Strongly recommended for MFA. Requires a mobile device. Not for password recovery.

Back to top

 

Phone, Alternate phone, and Office phone

All phone options available for MFA. Cell phone and email are the only options for password recovery. The phone methods all differ slightly:

  • Phone: Can receive a passcode via SMS text or automated call, i.e. cell or mobile phone - for both password recovery and MFA
  • Alternate phone: Can confirm login via automated call, i.e. land line - for MFA only
  • Office phone: Can confirm login via automated call, and phone number can include an extension - for MFA only

Steps to set up a phone method:

  1. To configure an international phone number, select the country from the drop-down list. This adds the country code automatically, so you do not need to type it.
  2. Enter your full phone number with area code or city code (no country code).
  3. Select "Text me a code" to enable both SMS Text and automated calls.
  4. Click "Next" and follow the prompts on screen and/or through the phone to verify this method.
    • If you chose "Text me a code", you will have to find the text with a 6-digit code, then type that code on the "Enter code" screen.
    • If you chose an automated call, you will have to answer the phone and press the # sign on the phone when prompted.
  5. You will see confirmation that your phone was registered successfully and this method will appear in your list of sign-in methods.

This is an example of what you would see when setting up the Phone method:

Back to top

 

Security key

USNH supports YubiKey physical security keys, for MFA only

Back to top

 

Email

Essential for password recovery. Not for MFA. Email and cell phone are the only options for password recovery.

Steps to set up the Email method:

  1. Type your personal, non-school email address in the "Enter email" box. Use an email address you will be able to access even if you cannot log into USNH. Click "Next".
  2. You will see a screen labelled "Email" that says "We just sent a code to <your personal, non-school email address>" with a box to "Enter code".
  3. Go to your personal, non-school email and find the "USNH account email verification code" message from Microsoft on behalf of USNH. Open the message to see the 6-digit code. Write down the code if necessary. Note: if you do not readily find the message, check your spam or junk mail folders.
  4. Go back to the "Email" screen and type the 6-digit code into the "Enter code" box, then click "Next".
  5. You will see confirmation that Email was successfully registered and this method will appear in your list of sign-in methods.

Note: For non-primary accounts the alternate email is your primary campus email address instead of a personal email address.

Back to top

 

Further Readings

MyAccount: Resources

Password Best Practices

USNH Password Policy 

 

Need additional help?

Visit the Technology Help Desk Support page to locate your local campus contact information or to submit an online technology support request. For password issues you must call or visit the Help Desk in person.

 

Details

Details

Article ID: 4687
Created
Fri 5/26/23 7:21 PM
Modified
Mon 6/24/24 8:57 AM
Applicable Institution(s):
Keene State College (KSC)
Plymouth State University (PSU)
University of New Hampshire (UNH)
USNH System Office