How do I remove MFA from sign in?

Question

How do I remove MFA from sign in?

Kate Ranney Sayle 20

I want to elimintae MFA from being required when I login.

Kate Ranney Sayle 20 Reputation points

2026-06-04T18:58:47.3633333+00:00

I am the administrator. MFA is a PITA. I want to get rid of it.
Andrew Barnes 95 Reputation points

2026-06-04T20:33:22.1433333+00:00

You can't and you shouldn't either!

With Microsoft’s mandatory MFA enforcement, you generally can’t "remove MFA" for admin sign-ins to Microsoft admin portals.

https://learn.microsoft.com/en-us/entra/identity/authentication/concept-mandatory-multifactor-authentication?tabs=dotnet

As an admin, removing MFA would also be a major security step backward; today, the right fix is not “disable MFA,” but make MFA less painful

The better approach is to use phishing-resistant methods like passkeys, FIDO2 keys, or Windows Hello so MFA is safer and less annoying.
https://learn.microsoft.com/en-us/entra/identity/authentication/concept-authentication-passkeys-fido2
Kate Ranney Sayle 20 Reputation points

2026-06-04T20:42:07.46+00:00

I'm not removing it from the admin account. Just my own. I'm confident in my own security measures.
Bulldog 4,740 Reputation points

2026-06-05T00:05:27.2866667+00:00

I want to eliminate MFA from being required when I login.

Whomever will try to attack your account thanks you in advance.

Answer accepted by question author

0 additional answers

Your answer

Kate Ranney Sayle 20 Reputation points

2026-06-04T18:58:47.3633333+00:00

I am the administrator. MFA is a PITA. I want to get rid of it.
Andrew Barnes 95 Reputation points

2026-06-04T20:33:22.1433333+00:00

You can't and you shouldn't either!

With Microsoft’s mandatory MFA enforcement, you generally can’t "remove MFA" for admin sign-ins to Microsoft admin portals.

https://learn.microsoft.com/en-us/entra/identity/authentication/concept-mandatory-multifactor-authentication?tabs=dotnet

As an admin, removing MFA would also be a major security step backward; today, the right fix is not “disable MFA,” but make MFA less painful

The better approach is to use phishing-resistant methods like passkeys, FIDO2 keys, or Windows Hello so MFA is safer and less annoying.
https://learn.microsoft.com/en-us/entra/identity/authentication/concept-authentication-passkeys-fido2
Kate Ranney Sayle 20 Reputation points

2026-06-04T20:42:07.46+00:00

I'm not removing it from the admin account. Just my own. I'm confident in my own security measures.
Bulldog 4,740 Reputation points

2026-06-05T00:05:27.2866667+00:00

I want to eliminate MFA from being required when I login.

Whomever will try to attack your account thanks you in advance.

Answer 1

Got it. If this is your normal user account and not the admin account you use for admin portals, then the MFA prompt is probably coming from one of three places:

Per-user MFA Entra admin center → Users → Per-user MFA Check whether your user is set to Enabled or Enforced. If so, set it to Disabled.

Security Defaults Entra admin center → Identity → Overview → Properties → Manage security defaults If Security Defaults are enabled, they can require MFA broadly. You cannot exclude just one user from Security Defaults; you would need to disable Security Defaults and use Conditional Access instead.

Conditional Access Entra admin center → Protection → Conditional Access → Policies Check whether any policy applies to your user, group, location, device state, or app and requires MFA.

Also, keep in mind that the old “MFA disabled” page only reflects legacy per-user MFA. A user can show as disabled there and still be required to use MFA because of Security Defaults or Conditional Access.

Docs: https://learn.microsoft.com/en-us/entra/identity/authentication/howto-mfa-userstates

https://learn.microsoft.com/en-us/entra/fundamentals/security-defaults

I still wouldn’t recommend removing MFA entirely, but if you are the admin and this is truly only your standard user account, those are the places to check.

Kate Ranney Sayle 20 Reputation points

2026-06-05T12:26:35.68+00:00

Now, the MFA is disabled, but now it asks me fro my username and PW twice. So instead of entering a code twice, now I'm entering UN and PW twice.