Microsoft Mandates MFA for Microsoft 365 Admin Center Access 

Microsoft will require multi-factor authentication (MFA) for anyone accessing the Microsoft 365 admin center, fully enforcing the change on February 9, 2026. The policy will block admin users without MFA from signing into core admin portals (portal.office.com/adminportal/home, admin.cloud.microsoft, admin.microsoft.com), and Microsoft urges organizations to enable MFA, audit privileged accounts (including hybrid environments), and prepare to avoid lockouts. The change is intended to reduce credential-stuffing, phishing, and related attacks against high-privilege accounts and to align with compliance frameworks and other identity protections.