Onedrive two-factor authentication (2FA)

Yes. Two-step verification (2FA) is applied at the Microsoft account level, not separately per service.

1. When someone tries to sign in to OneDrive in a browser using that Outlook/Microsoft account, the same two-step verification protection applies. They must pass both the password and the second factor (code, Authenticator approval, etc.) before accessing OneDrive.
2. The same applies when signing in to OneDrive in Windows (for example, the OneDrive sync client tied to that Microsoft account). If the account has two-step verification enabled, the sign-in flow will require the second factor when first adding the account or when security conditions require re-authentication.

For additional protection of specific sensitive files, Personal Vault in OneDrive adds its own extra authentication step on top of the account’s 2FA.

References:

• How to use two-step verification with your Microsoft account
• What is: Multifactor Authentication
• How OneDrive safeguards your data in the cloud
• How SharePoint and OneDrive safeguard your data in the cloud
• Protect your OneDrive files in Personal Vault