Please follow these steps to secure your O365 account.

  1. Set a strong password that only you can remember. Do not resuse your password with other services.
  2. Change your password regularly (E.g. every 3 mths or when you feel u are compromised)
  3. Enable 2FA or MFA on your O365 account with this link: https://aka.ms/mfasetup
    Video Guide: https://aka.ms/setup-phone-authentication 
  4. Email helpdesk@ispeed.sg to ask us to enforce the 2FA on your account. 
  5. Read this article about spam and phishing emails :
    https://helpdesk.ispeed.sg/support/solutions/articles/16000077780-why-spam-and-phishing-emails-still-come-in-to-my-email-in-o365- 
  6. Have a good antivirus installed on your PC and keep it up -to-date.
  7. Always trust no one and counter check with your IT if it's really authenticate or fake email.


Useful and helpful Links:

https://portal.office.com (O365 Portal)

 https://mail.office365.com (O365 Webmail)

  • Please use this URL to login to the O365 portal / webmail. Do not click on any links in any emails to login. They might be phishing or fake portals to "fish" for your password.


https://aka.ms/mfasetup

  • Do go to this link above to register your O365 account for 2FA, it should normally prompt you to download the Microsoft authenticator app to scan the QR code to generate a 6 digit pin to sign in. 


https://mysignins.microsoft.com/security-info This link allows you to add more methods of 2FA in case you lose your phone or upgrade your mobile device. U can add alternative ways to verify yourself with a personal email / HP number / Office phone e.t.c. 

  • Authenticator App - Notification or code
  • Mobile Phone - SMS or call
  • Alternate Email
  • App Password (For apps or clients that do not support 2FA/modern authentication)


https://myaccount.microsoft.com/

  • You can always go to this link to check on your status of your account, change your O365 password and view recent sign-ins. 
  • It's recommended you change your email password every 90 days or as and when you feel that your account is compromised.
  • Do not use the sam passwords with other services or apps.

https://myaccount.microsoft.com/device-list

  • This link allows you to check which device you have signed in before and u can logout if u have forgotten to do so.