How can one set up "type the code" type 2fA

Question

How can one set up "type the code" type 2fA

Joshua Felland 5

Long story short:

2FA with my company be like:

Login with BOTH login and password
1. If anything incorrect, goto 1
2. If correct, goto 2
A notification is AUTOMATICALLY (there is no choice) sent to my MS authentication app.
1. I have to MANUALLY type the code in
2. Next verify my identity with bio-metrics.
Access Granted

2FA with personal accounts be like:

Type in your e-mail/user name
Select style of login
1. Password (The way it should be)
  1. Enter password
  2. Access Granted
2. Send notification to MS Authentication app
  1. Notification is sent to MS Authentication app
  2. Select 1 of 3 numbers
  3. Verify Identity with Biometrics
    1. POTENTIAL to bypass with "codes"
  4. Access Granted
3. Others that don't mean anything to my question here

Is there any way to keep 2FA... but have it REQUIRE password before it sends 2FA as well? I don't like this passwordless option at all.

[Moved from Microsoft 365 and Office | Other]

Rethesh Narayana Giri 10 Reputation points

2025-12-27T04:58:29.37+00:00
What you can do (recommended)

Go to Microsoft Account → Security → Advanced security options

Turn OFF:

Passwordless account

Phone number sign-in (if enabled) **Keep 2FA ON** Set **Microsoft Authenticator** as your *secondary* factor (approval + biometrics)

Result:

You must enter your password

Then you get Authenticator approval

No automatic passwordless-only login
What you can do (recommended)

Go to Microsoft Account → Security → Advanced security options

Turn OFF:

Passwordless account

Phone number sign-in (if enabled)

Keep 2FA ON

Set Microsoft Authenticator as your secondary factor (approval + biometrics)

Result:

You must enter your password

Then you get Authenticator approval

No automatic passwordless-only login
Joshua Felland 5 Reputation points

2026-01-03T02:28:43.7666667+00:00
Thank you for your reply. And sorry I didn't get back sooner... Holidays and all that...

I think I understand most of this... what I am NOT seeing, however...1. I don't see the "Advanced security options" you speak of. When I goto "Microsoft Account → Security" My options are

Change Password

Sub to MS-365

Account Security

Manage How I sign in

View Activity

File Backup & security

Goto Data Security

Device Protection

View My Devices

When I select "Account Security → Manage How I sign in" I see the following

Change Password

Change

Two-Step Verification

Manage

Ways to prove who you are

Enter Password

Change Password

View Activity

Remove

Email a Code

View Activity

Remove

Enter a code from an authenticator app (NOT MS 2fa, for the moment)

View Activity

Remove

Use a Passkey

View Activity

Rename

Remove

Add another way to sign in to your account

Additional Security

Passwordless Account

Two Step verification

App Passwords (there are none, at the moment)

Sign out everywhere

Recovery Code

I am an I.T. Professional... but the ever changing landscape of MS has caused a lot of my clients to reconsider... and so I don't use a lot of MS anymore.... and as my Professional account works how I want it, I've not really had to worry about it much.. but wanting to secure my private life more has led to this rabbit hole and seeking help.