A stolen password shouldn't open your business.
Many Microsoft 365 break-ins start with a stolen or guessed password. Our baseline sign-in rules make a password on its own far less useful: every user signs in with multi-factor authentication, older sign-in methods that skip MFA are blocked, and admin accounts get extra protection. It's on every plan.
Uses Conditional Access in Microsoft Entra ID P1, included in Microsoft 365 Business Premium, which every plan requires.
How it works
Plan the rollout
Before switching anything on, we check what could break: shared accounts, older devices and apps that still use legacy sign-in.
Help everyone enrol
Staff set up an authenticator app with step-by-step help from us.
Enforce
Conditional Access policies require MFA and block legacy sign-in across the business.
Maintain
New starters are covered from day one, and changes go through our helpdesk.
Where it helps
Real situations this covers for businesses like yours.
A password reused on a breached website
Without the second factor, the attacker has a much harder time getting in.
A sign-in attempt from an old email app
Legacy sign-in methods can't do MFA, so they're blocked before they become a back door.
Your insurer asks 'is MFA enforced for all users?'
Yes - and the policies show it.
A director's admin account
Admin accounts get stricter rules, because they're the keys to everything.
Which plans include it
Prices exclude VAT. Plans require Microsoft 365 Business Premium (or equivalent), billed separately at Microsoft's list price - we manage and right-size your licences. See full pricing.
Common questions
Isn't this just Microsoft's 'security defaults'?+
Security defaults are a single on/off switch. Conditional Access lets us set precise rules - who, which apps, which conditions - and it's included in Business Premium.
Will MFA annoy my team?+
We roll it out with your team and set it up so prompts are sensible rather than constant.
What does Secure+ add?+
Secure+ adds advanced sign-in protection: a wider set of rules, such as blocking sign-ins from countries where you don't operate.
What if someone loses their phone?+
They call the helpdesk. We confirm who they are, then reset their sign-in methods so they can set up their new phone.
Do staff need a smartphone?+
An authenticator app on a smartphone is the usual method. If someone can't use one, we'll agree an alternative with you, such as a hardware security key.
Works alongside
Want this looked after for you?
Free Microsoft 365 security audit - Cancel anytime in your first 3 months