Multi-Factor Authentication (MFA)

MFA is required on all managed Microsoft 365 accounts. We primarily use Microsoft Authenticator, with hardware tokens or SMS only as controlled backups where policy allows.

If you lose access to your MFA device, contact the help desk for a verified identity reset—never share MFA codes with anyone, including people claiming to be IT support.

CyberByte will never ask for your MFA code by phone, email, or chat.

MFA fatigue attacks are real: if you receive unexpected approve prompts, tap Deny / report fraud and call the help desk. Unexpected prompts often mean someone has your password.