MFA Security Issues

Can Microsoft MFA Be Set Up on Multiple Devices?

John Wilson Sep 30, 2026 868 views

Question details

The user is inquiring whether Microsoft Multi-Factor Authentication (MFA) can be configured across multiple devices, particularly for scenarios involving shared point-of-sale accounts.

Can Microsoft MFA Be Set Up on Multiple Devices?

Product: Microsoft MFA
Device & OS: not provided
Scenario: Securing a shared Microsoft account across multiple employees without relying on personal smartphones.
Observed behavior: Organizations need a way to authenticate shared accounts while maintaining security and accountability, avoiding the risks of sharing a single authentication method.

Before you start

Before making changes to authentication methods, ensure you have Global Administrator or Privileged Authentication Administrator rights in the Microsoft Entra admin center.

Solution 1Recommended

Create Individual User Accounts (Recommended)

To maintain security and accountability, replace shared accounts with individual user accounts that have appropriate delegated permissions.

Sharing an account and its MFA methods reduces accountability because it becomes impossible to track which specific user logged in. Microsoft strongly advises against shared identities for secure environments.

Access Microsoft 365 Admin Center

Add New Users

Navigate to 'Users' > 'Active users' in the left-hand menu and select 'Add a user'.

Assign Permissions

Fill in the individual employee's details and assign them a specific role (e.g., Point of Sale operator) rather than full admin access.

Configure Individual MFA

Require the new user to register their own Microsoft Authenticator app or phone number upon their first login.

Create Individual User Accounts (Recommended)

Accountability Improved: Individual accounts ensure that all actions taken within the system are logged to the specific employee, maintaining compliance and security.

Solution 2

Use Hardware Security Keys for Shared Accounts

If a shared account is absolutely unavoidable, use an organization-owned FIDO2 hardware security key instead of personal mobile phones.

Free Microsoft Office alternative

Simplify Your Workflow with WPS Office

While securing Microsoft shared accounts requires strict MFA policies and hardware keys, choosing the right productivity suite shouldn't be complicated. WPS Office is a highly compatible, lightweight, and free alternative to Microsoft Office, offering an intuitive experience for your entire team.

Fully compatible with Microsoft Word, Excel, and PowerPoint formats.Lightweight software that runs smoothly on point-of-sale systems and older hardware.Built-in document encryption to secure sensitive business data without complex account setups.Familiar tabbed user interface, ensuring zero learning curve for new staff.

Frequently Asked Questions

Can I register the Microsoft Authenticator app on two different phones for one account?

Yes, you can register multiple authentication methods for a single Microsoft account. During the setup process at mysignins.microsoft.com, you can choose to 'Add sign-in method' and configure a second device's Authenticator app for the same account.

Why does Microsoft discourage sharing MFA methods?

Sharing MFA methods weakens security because it becomes impossible to audit which specific person accessed the account. It also increases the risk of unauthorized access if a shared device or token is lost or compromised.

What is a FIDO2 hardware token?

A FIDO2 token is a physical device, often resembling a USB flash drive, that provides phishing-resistant, passwordless authentication. Users plug it into the computer and tap it to securely sign in to Microsoft services without needing a smartphone.

Microsoft Office Security Issues