With Multi-Factor Authentication (MFA) for Office 365, users are required to acknowledge a phone call, text message, or an app notification on their smartphone after correctly entering their password. Only after this second authentication factor has been satisfied can a user sign in. If your device is lost, you can disable the password remotely.