Using 2FA/MFA while traveling

Whether you're planning to travel or not, EKU STRONGLY URGES you to enroll at least two devices, in case your preferred device is lost, stolen, disabled, or inaccessible. 

1. If you're thinking of using a type of device you've not previously used for 2FA/MFA, familiarize yourself with any limitations and requirements involved.
2. Enroll a new device if necessary.
3. If you'll be crossing time zones, understand how that works.
4. Review the requirements, costs, and preparation associated with the method(s) of authentication you plan to use:
   
   Number Matching Method (Microsoft Authenticator App)
   

   Requirements:	Internet connection (wi-fi or data) at the time of log in
   Cost:	The cost of connecting your device to the internet (via wi-fi or data)
   Preparation:	Determine the availability and cost of internet access where you'll be travelling. If you're travelling internationally, purchase an international data plan, purchase and install an international SIM card, or confirm the availability of wi-fi access wherever you will need to log in. Try using the Microsoft Authenticator app to log in at least once before you leave.

   
   
   Phone Call Method
   

   Requirements:	Cellular connection at the time of log in. If you're traveling outside the U.S., the ability to receive international calls.
   Cost:	The cost of receiving a phone call from the U.S. when you log in.
   Preparation:	Determine the availability and cost of cellular service where you'll be traveling. If you're traveling internationally, purchase an international calling plan, or purchase and install and international SIM card.

   
   
   SMS Text Message Code
   

   Requirements:	Cellular connection required to receive the list of passcodes. Cellular connection not required to log in.
   Cost:	The cost of receiving a text message when you request the list of passcodes. No cost use passcodes from the text message when you log in.
   Preparation:	Before you leave on your trip, request a list of passcodes.

   
   
   International Phone or SIM card (Microsoft Authenticator app, One-time Passcode, Phone Call, SMS Text Passcodes)
   

   Devices:	Smart phone purchased in another country or international SIM card used to replace the SIM card in your existing phone.
   Requirements:	Can be used for the Microsoft Authenticator App, Phone Call, and SMS Text Message Code methods of authentication. Device must have an internet connection (wi-fi or data) to download the Microsoft Authenticator App and to use the authenticator app method of authentication. Device must have a cellular connection to receive a text message verification code. One-time passcodes can be used within the Microsoft Authenticator app without an internet connection.
   Cost:	Depends on the calling plan you purchase with the phone or SIM card and method of authentication you use.  International phones are typically purchased to take advantage of lower rates for voice, text, and data within the country of purchase; however, international services (e.g., to the United States) may be considerably more expensive.
   Preparation:	If you will be purchasing a phone in another country, plan to take another enrolled device with you.  You will need another way of authenticating in order to enroll your international phone. After purchasing an international phone or installing a new SIM card, enroll the number and install and/or reactive Microsoft AFA. If you plan to use passcodes via SMS text message, request a list of passcodes before you leave. If you plan to use Number Matching Method (Microsoft Authenticator App), be sure you install and activate the Microsoft Authenticator app when you enroll your phone. Revie the Cost information provided above for each method of authentication and be sure you understand the charges that will apply for using the phone for each method.
   More info:	See Smarter Travel International Cell Phone Guide (external website) for additional tips regarding options for using cell phones abroad.

   
   
   Security Key Tab (requires a YubiKey)
   

   Requirements:	Does not require an internet or cellular connection.
   Cost:	One-time cost for the security key itself. No cost associated with using the security key.
   Preparation:	If you've purchased a new security key, be sure to enroll it and use it to log in at least once before you leave.
   Support Security Keys	Microsoft is compatible with a variety of security keys.  More information regarding compatible security keys fore in KB0019229.