We are enhancing the security of student school accounts by introducing Microsoft Authenticator, a multi-factor authentication (MFA) system, that helps protect personal information and school data. This update will ensure that student logins remain secure, even if a password is compromised.

What This Affects:
Students will need to use MFA to access school email, along with the Microsoft 365 Suite that includes Word, Excel, PowerPoint, OneDrive, etc. Students will be unable to access these important tools once the enforcement begins during the dates listed below. 

Rollout Plan:
We have already begun enforcing Microsoft Authenticator setup in descending grade order, starting with 12th grade and working our way down to 7th grade. We will notify grade levels the week before to begin the setup process. Enforcement will begin during a two hour period at school so the IT team is able to visit classrooms to assist students.

Timeline:
10th grade: Week of October 27-31

9th grade: Week of November 3-7

8th grade: Week of November 10-14

7th grade: Week of November 17-21

What Students Need to Do:

1. Download the Microsoft Authenticator app on their personal phone (available for free in the Apple App Store or Google Play Store).

2. Follow the setup instructions provided by the IT department when they visit your classroom in the announced week. If you miss the classroom visit, come to the front desk to receive assistance.

If a student does not have a personal phone, a parent or guardian will need to install the app on their phone instead. We will have a dedicated device for them to authenticate while working at the school, and they will use the parent device to work at home. For security reasons the two devices must be setup simultaneously, so please stop by the office to receive guidance on how to complete the setup and manage sign-ins for your student.

Thank you for your partnership in helping us maintain a safe and secure digital learning environment for all students.

Common Questions:
1. What is Microsoft Authenticator, and why are we using it?
Microsoft Authenticator adds an extra layer of security (called multi-factor authentication) to protect student accounts. Even if someone knows a student’s password, they can’t access the account without approval from the app.

2. Does my student have to install the app on their personal phone?
Yes. Each student in grades 7–12 should install the Microsoft Authenticator app on their personal phone if they have one.

3. What if my student doesn’t have a phone?
If your student does not have a personal phone, a parent or guardian should install the app on their own phone. Once installed, please stop by the school office for instructions on linking the parent’s phone to the student’s account. We will have a dedicated device for them to authenticate while working at the school.

4. Is it safe to install Microsoft Authenticator on my or my child’s phone?
Yes. The app is developed by Microsoft and does not collect personal data from your phone. It only connects to your student’s school account to confirm logins.

5. Will students have to approve every login?
Students will need to approve the first login on each device they use (for example, their school laptop or personal computer). After that, approvals will only be needed occasionally, such as after a password change or major update.

6. What happens if my student gets a new phone or deletes the app?
If a student changes phones or accidentally deletes the app, they’ll need to come to the school office to reset their authentication settings.

7. What if the Authenticator app isn’t working or we can’t log in?
Visit the school office during school hours for assistance.

8. Can we use a tablet or computer instead of a phone?
The Authenticator app must be installed on a mobile device, but tablets that support app downloads (like an iPad) can work if no phone is available.

9. Will parents need to approve sign-ins for their child’s account regularly?
If a parent’s phone is being used for Authenticator, they may need to approve occasional sign-ins—especially after password resets or when a student logs in on a new device.