Environment
Okta, Univeristy of Michigan affiliates
Issue
What is Multi-Factor Authentication (MFA)? Why should I enable it on my UMICH account if I'm not required to?
Resolution
When you sign into (authenticate to) your UMICH account with your uniqname and password, you are telling the system you are who you say you are. Unfortunately, using a name and password alone isn't very secure. Uniqnames are easy to find and passwords are often easy for hackers to guess or discover. If you use the same password for your UMICH account and other accounts (which is not recommended), when one account gets compromised, your UMICH account could be in danger as well.
We recommend everyone use multi-factor authentication, even if you are not required to do so, as it provides an extra layer of security to protect your account. U-M has become the target of constant phishing attacks aimed at stealing U-M community members' identities and financial information and using mutli-factor authentication significantly improves the security of your account.
Multi-Factor Authentication (MFA)
Multi-factor authentication requires more than just a uniqname and password. When multi-factor authentication is enabled on your account and you sign in, you will be asked for an additional verification method, what we call a "factor," to prove you are who you say you are.
Okta Verify
Starting February 25, 2026 for UMICH accounts, we will use an app called Okta Verify to provide multi-factor authentication.
After entering your uniqname and password as usual, the system will send a notification to your smart phone asking you to confirm it is really you signing in. After you confirm via the Okta Verify app, you are logged in. With the Okta Verify app, even if your uniqname and password are compromised, your account will still be secured. This is because a hacker can’t log in without you approving it on your phone.
Additional Information
Need additional information or assistance? Contact the ITS Service Center.