Multi-Factor Authentication (MFA) Setup Guide

Multi‑Factor Authentication (MFA) adds an extra layer of security to your HCC account. During setup, you will be asked to verify your sign‑in using a second method, such as the Microsoft Authenticator app or a text message (SMS).

The instructions below describe what to expect under most conditions when signing in with a web browser and using a smartphone or tablet for MFA. Because devices and settings vary, it is not possible to provide step‑by‑step instructions for every situation. 

You will be asked to verify your sign‑in during setup. Only approve requests you initiate yourself.

MFA Not Working?

Email helpdesk@hcc.edu from your HCC email address or an email address we have on file to have your MFA sign in method reset.

Got a new address or phone number?

Before You Begin

Make sure you have:

✅ Your HCC email address and password
💡 Tip: We recommend using a separate browser profile for your HCC Account to keep it distinct from personal accounts.
Need to log in for the first time or just had your MFA reset? Click here for password reset instructions. 

✅ A device with a browser and Internet access

• Use the browser to sign in (do not close it during setup)

• A computer is recommended

• A smartphone or tablet can also be used

• On campus, connect to HCC Wireless Guest if needed.

✅ Your smartphone 

• Used for the Microsoft Authenticator app

• A tablet can be used if it's available when you need to sign in

✅ Ability to install apps from the Apple App Store or Google Play

• You'll use the Microsoft Authenticator app

Step 1: Choose Your Primary MFA Method

You can use either of the following methods to set up MFA.

Using both is recommended to keep yourself from getting lock out if you get a new phone.

✅ Microsoft Authenticator App (recommended)

• Works over Wi‑Fi or cellular data

• Ideal for on‑campus use where cellular coverage may be limited

• Can generate a one‑time passcode (OTP) even when offline (after setup)

Download: Click here to get Microsoft Authenticator

⚠️ Text Message (SMS) 

• Authentication by text message is being phases out by Microsoft in February 2027. 

• Requires a cell phone number

• Requires cellular service

• Not recommended as the only method for on‑campus use due to inconsistent reception

Step 2: Setting Up MFA "Let's Keep Your Account Secure"

MFA setup always starts in a web browser.

Keep your browser open while completing setup.

You may use:

• A computer and a smartphone or tablet (recommended)

OR 

• a smartphone only using the browser on your phone

Internet access is required during setup.

On campus, connect to HCC Wireless Guest if needed.

Microsoft Authenticator Setup

1. Sign in at my.hcc.edu using your HCC account
   (your username is your HCC email address)

2. When prompted with “More information required”, select Next

3. Microsoft will recommend the Microsoft Authenticator app

   • Select Next to continue

   • Or choose “I want to use a different method” to select SMS

4. If you choose Microsoft Authenticator:

   • Install the app on your smartphone or tablet if it is not already installed

   • Open the app and choose Add account → Work or school account

5. When prompted to connect your account, follow one of these options:

If you are using a computer and a phone/tablet:

5. • Select Next in your browser to display a QR code

   • Scan the QR code with the Authenticator app

If you are using only a smartphone:

5. • Select “Pair your account to the app by clicking this link” (if shown)

6. Complete the test sign‑in:

   • Approve the notification or

   • Enter the 2‑digit number shown in your browser

7. Select Next, then Done to complete setup

✅ Do not delete the Authenticator app after setup

✅ Only approve sign‑ins you initiate yourself

⚠️ No one from HCC will ever ask you to verify a number you do not see on your own screen.

❌ Never share this code with anyone; not even if they claim to be from IT.
It is only for verifying your sign‑in.
(a.k.a. OTP, code, one-time passcode, verification code) 

Step 3: Add a Secondary Method (Strongly Recommended)

After setting up your primary method, add a backup method.

This helps if:

• You get a new device

• Your primary method is unavailable

• You need to re‑authorize access

You can manage or add methods later at:  👉 Manage your sign‑in methods

Common Scenarios

• New device, same phone number → authenticate using SMS

• Same device, new phone number → authenticate using Authenticator

• New device and new number → visit the Help Desk

Important Security Reminder

• ❌ No one from IT or the Help Desk will ever ask for your password

• ❌ Never share a verification code (a.k.a. one time passcode, OTP, passcode)

• ❌ Never approve a sign‑in you didn't start or can't see on your screen

If something doesn't feel right, stop and contact the Help Desk.

Learn more about Cybersecurity Awareness

Need Help?

If you get stuck at any point, the Help Desk is here to help.

Important Clarification About Internet and Cell Service

• Microsoft Authenticator setup requires an internet connection

• Push notifications require internet access
  (Wi‑Fi or cellular data both work)

• A cellular signal is NOT required if you have Wi‑Fi

• Microsoft Authenticator can generate a one‑time passcode (OTP) even when offline, once it has been set up

This means you can use Microsoft Authenticator on campus over Wi‑Fi, even with poor cell reception or no cell service.

Frequently Answered Questions (FAQ)

Need Help?

• Live Support: Chat Now (pending availability)

• Drop-In Hours: Visit the IT Help Desk in Frost 109 or the Tech Center in Campus Center 251 for in-person assistance

• Help Articles: Visit hcc.edu/help for more information