Story perspectives

Microsoft Mandates Multi-Factor Authentication for Admins by 2026

1/9/2026

Summary

Story summary

On February 9, 2026, Microsoft will require multi-factor authentication (MFA) for all Microsoft 365 admin center users.
Administrators without MFA will be blocked from logging in.
The requirement targets portals such as portal.office.com/adminportal/home, admin.cloud.microsoft, and admin.microsoft.com.
Microsoft notes that over 99.9% of compromised accounts lacked MFA and were vulnerable to phishing.
Global admins can enable MFA with various methods, while individual users manage MFA settings via the MFA setup portal.

1 of 1

Story summary

On February 9, 2026, Microsoft will require multi-factor authentication (MFA) for all Microsoft 365 admin center users.
Administrators without MFA will be blocked from logging in.
The requirement targets portals such as portal.office.com/adminportal/home, admin.cloud.microsoft, and admin.microsoft.com.
Microsoft notes that over 99.9% of compromised accounts lacked MFA and were vulnerable to phishing.
Global admins can enable MFA with various methods, while individual users manage MFA settings via the MFA setup portal.