· Enable MFA wherever it is available, particularly on accounts containing personal, financial, or sensitive information. · Never share your password or MFA passcode with anyone. · Never approve an MFA request you did not initiate, and carefully verify any number, location, or application information displayed before approving the request. For example, if you receive an MFA approval request when you are not trying to sign in, deny the request and report it to your college IT office. This could mean someone is attempting to access your account. · For Microsoft MFA at CUNY, set up more than one authentication method when possible so you have a backup if your primary method is unavailable. CUNY lists Microsoft Authenticator as the most convenient second-factor option. · Finally, remember to switch your MFA if you are getting a new phone before discarding the old phone. |