Multi-factor authentication

Western Norway University of Applied Sciences has implemented multi-factor authentication (MFA) to enhance login security.MFA provides an extra layer of protection against unauthorized login attempts and identity theft. You must activate this yourself on your Microsoft account.The risk of data breaches and misuse of user accounts is greater than ever. The most effective measure to protect yourself and HVL’s systems is to enable MFA.

What is a Microsoft account at HVL?

Your Microsoft account is the user account you use to log in to HVL’s digital services, including:

  • Outlook (email)

  • Teams (collaboration)

  • OneDrive (storage)

  • Office 365 applications such as Word, Excel, and PowerPoint

Your username is usually formatted as:

  • studentnumber@stud.hvl.no (for students)

  • username@hvl.no (for staff)

This account gives you access to most of the IT services at HVL.

What is multi-factor authentication?

Multi-factor authentication (MFA) is a security solution that requires two types of verification when you log in:

  • Something you know – such as your password

  • Something you have – such as a one-time code on your mobile phone

Even if someone knows your password, they will not be able to log in without the second verification. This reduces the risk of your account being misused.

What is an authenticator app?

An authenticator app is a mobile application that generates one-time codes used for logging in.

At HVL, we recommend using Microsoft Authenticator, but other apps such as Google Authenticator and Authy can also be used.

The app can be downloaded for free from the App Store or Google Play. Once MFA is activated, you will receive a prompt in the app every time you log in – either by tapping “Approve” or by entering a one-time code from the app.

Important: Add your phone number as an additional method

When setting up multi-factor authentication, you should also register your mobile number as an alternative method.

This provides an extra layer of security if you:

  • Change your phone

  • Lose access to your authenticator app

  • Need to reset your MFA settings

With your mobile number registered, you can receive one-time codes via SMS and log in to set up a new phone without needing to contact IT support.