Two-Factor Authentication for Personal Vault Only

Question

I can't find an answer to this. I recently set up Personal Vault. It did not ask me what method I wanted to use for two-step verification, and I can now access it with the single factor of entering my Microsoft account PIN. I need second-factor auth for Personal vault ONLY. Is that possible, and if so how can I set it up?

Answer 1

Thanks, Craig. I understand and agree with all that, but it doesn't quite fit my situation. My husband and I have access to one another's accounts in case we need information, but I am legally obligated to restrict his (and anyone else's) access to some confidential information related to a minor governmental position I hold. I thought PV could be the answer to that, but it isn't if access to my Microsoft account gives access to PV.

If it can't do this, I'll have to find another solution.

Yeah, I don't think that will work for you. Your husband could get into your account and set up an authentication method with something you own like simply plugging in your security key. Not that he will, of course.

Accounts can get hacked and files stolen. If that happens you lose access to your Microsoft account and your account is closed.

Microsoft can read your files. Files are not encrypted at rest in the cloud. One of the best cloud encryption softwares is Boxcryptor, but they joined forces with Dropbox which is another possibility for you. If you have a lot of files to encrypt you can look into cloud encryption software for OneDrive.

But the company you work for should be able to give you the tools to secure these files for you.

Answer 2

Thanks, Craig. I understand and agree with all that, but it doesn't quite fit my situation. My husband and I have access to one another's accounts in case we need information, but I am legally obligated to restrict his (and anyone else's) access to some confidential information related to a minor governmental position I hold. I thought PV could be the answer to that, but it isn't if access to my Microsoft account gives access to PV.

If it can't do this, I'll have to find another solution.

Answer 3

Hi Kathy,

Welcome to the Microsoft community.

I'm not sure second-factor authentication for the Personal Vault is possible since Windows Hello is one of the strongest authentication methods available. And if your online account is protected by two-factor authentication you are well protected. You could use the authenticator app or a security key to authenticate again but you wouldn't want to have a code sent over email, text, or phone number which are weaker security authentication methods.

The personal vault is encrypted by Bitlocker on your device which makes the Personal Vault secure if your device gets lost or stolen.

Someone else here may know the answer to this.

• Craig