Setting Up Multifactor Authentication

CNM accounts require a password and multifactor authentication (MFA) such as a code from an authenticator app or a security key (YubiKey).

Need Help? 

Visit the ITS Support page for locations and hours of operation. 

For immediate assistance, call 505-224-HELP (4357). 

Open a support request through help.cnm.edu

All CNM users are governed by the Information Technology Use Policy.

About Multifactor Authentication

CNM accounts require a password and multifactor authentication (MFA) to help protect personal information and reduce the risk of unauthorized access.

MFA adds an extra layer of security by requiring a second form of verification when signing in. For example, after entering your username and password, you may be asked to approve a sign-in notification or use a security key to verify your identity.

View a video from Microsoft explaining MFA and how to authenticate using the Microsoft Authenticator mobile app.

Jump to a section on this page:

Important MFA Changes for Students

Beginning January 11, 2027

Text message and phone call verification will no longer be available as multifactor authentication methods for student accounts. Microsoft is retiring text and voice call verification because these methods are more vulnerable to interception and fraud than stronger authentication methods.

Faculty and staff already use strong MFA methods. Beginning Spring Term 2027, students will also be required to use a stronger authentication method to access CNM systems.

Important: After January 11, 2027, students who have not enrolled in an approved MFA method will be unable to access CNM email, Brightspace, or Banner until they complete setup.

Choose an MFA Method

Before January 11, 2027, students should set up one of the approved authentication methods below.

Microsoft Authenticator App

Microsoft Authenticator is the recommended MFA option for most users.

Benefits include:

  • Free mobile app
  • Setup takes about five minutes
  • Works with Wi-Fi, even without a cell phone signal 
  • Provides secure sign-in notifications

Set Up Microsoft Authenticator

Security Key (YubiKey)

A YubiKey is a small physical device that can be used instead of a smartphone for authentication. Simply plug it in, enter a PIN, and tap to verify your identity. 

This option may be appropriate for users who:

  • Do not have a smartphone
  • Prefer a physical authentication device
  • Need an alternative to mobile app authentication

Request a Security Key (YubiKey)

Manage Your Authentication Methods

You can update, remove, or add authentication methods at any time.

  1. Visit the Microsoft Security Info page.
  2. Select Change or Delete next to an existing method.
  3. If you want to add another authentication method, select Add sign-in method.

Frequently Asked Questions

Why can't students keep using text messages for authentication? 

Microsoft is retiring text codes and voice call verification because they are less secure than using an authenticator app or a physical security key. 

What happens if students do not set up a new MFA method by January 11, 2027?

Students will be unable to access CNM email, Brightspace, or Banner until they enroll in an approved MFA method.

What if I do not have a smartphone?

You may use a security key (YubiKey) as an alternative authentication method. Tech Connect can assist with obtaining and setting up a security key.

Tech Connect is located on CNM Main Campus in the Student Resource Center, Room 114. Enter on the north side of the building, near the Quad.

Does Microsoft Authenticator access my personal phone data?

No. Microsoft Authenticator is used only to verify your identity during sign-in and does not access personal content such as photos, messages, or contacts. 

Can I use Microsoft Authenticator for more than one CNM account?

Yes. If you have both a student account and an employee account, you can add multiple CNM accounts to the Microsoft Authenticator app.

How long does setup take?

Most users can complete setup of Microsoft Authenticator or YubiKey in approximately five minutes.