2FA Enforcement Policy – Clarification Requested

Question

Hi Microsoft Support, could you please clarify if 2FA will be made mandatory across all accounts? We have a few email accounts with 2FA currently disabled, and we’d like to understand whether this could present any issues moving forward.

Answer 1

Dear @Geofrey Mubofu

Welcome to Microsoft Q&A Forum! 

Thank you for bringing this to our attention. To answer your question directly: Yes, Microsoft is moving decisively toward making Two-Factor Authentication (2FA/MFA) a mandatory standard for all accounts, particularly within the Microsoft 365 business environment.

Microsoft has officially announced that Multifactor Authentication (MFA) will be mandatory across Microsoft 365 and Azure environments by September 1, 2025. This enforcement is part of a phased rollout: 

• Phase 1 (Starting October 2024): MFA will be required for accessing admin portals such as Azure Portal, Microsoft Entra Admin Center, Intune, and Microsoft 365 Admin Center. 
• Phase 2 (Starting October 1, 2025): MFA will be enforced for command-line tools (Azure CLI, PowerShell), mobile apps, REST APIs, and Infrastructure-as-Code tools. 

After the enforcement command is executed, users shouldn't be locked out, but they may receive a message prompting them to enable MFA once enforcement for their tenant has started.

However, our strong and urgent recommendation is to proactively enable 2FA for all users in your tenant without delay. This single setting will enforce MFA registration for all users and protect your organization. For a step-by-step guide on how to check and enable this policy, please follow the official Microsoft documentation:

• Configure Security Defaults for Microsoft Entra ID

By enabling this, you will ensure uninterrupted access to your services, vastly improve your security posture, and align your organization with modern cybersecurity best practices.

In case you need more time to prepare for phase 2, you can refer to the following link: Request more time to prepare for Phase 2 MFA enforcement

I truly appreciate your patience and understanding. Wish you a pleasant day! 

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment". 

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.