MCC Daily Tribune

Tech Tip: Multifactor Authentication (MFA) Best Practices

• Stay signed in. On devices owned or assigned to you, after authenticating, respond by clicking on the Yes button to the prompt “Stay signed in?” this will reduce the number of times you are prompted to authenticate to a resource within the same browser session. Remember that sign-in frequency varies between services based on security and vendor requirements.  

• Use the Microsoft Authenticator app. The use of the Microsoft Authenticator app is still the most secure MFA option and we encourage members of the MCC community to make it their default authentication choice. Please ensure you are using the latest version of the app by checking your device’s App Store for updates.  

• Have a backup MFA plan. Be sure to add a second method (different cell phone, Authenticator app on a tablet) in case you should lose your mobile device, leave it at home or get a new phone! Log into https://myaccount.microsoft.com and click on Update Info. on Security Info tile to update your verification methods (adding a method or changing a phone number).

• Deny any authentication request that you didn’t initiate. If you receive an authentication request (by phone call, text, or through the Microsoft Authenticator app) and you did not initiate it, deny it and then reset your password on the Network Account Services website (https://myaccount.monroecc.edu). This authentication request may mean that a cybercriminal has your credentials and is trying to trick you into providing access to your account. You should always deny an authentication request that you did not initiate. 

For assistance call the Employee Technical Support at (585) 292-8324 (TECH), option 3, Monday through Friday, 8:45am to 4:45pm. 

Ann Penwarden
Computing & Information Technology Services
11/26/2024