Skip to main content
Call us
Phone numbers and hours
Help Center

Explore our online help resources

BlogHelp

Microsoft 365 from GoDaddy Help

Enable or disable security defaults

To protect your organization from identity-related attacks, admins can enable security defaults in the Email & Office Dashboard. When security defaults are enabled, all email users are required set up multi-factor authentication, or MFA, using the Microsoft Authenticator app. Admins will need to provide extra verification every time they sign in to their accounts.

When security defaults are enabled, your organization's emails must be set up in clients that support modern authentication (like Office 2016 and newer or Apple Mail). Most modern email clients don’t use modern authentication for IMAP, SMTP, or POP mail protocols. If you need to use these protocols, check with your email provider.

Note: If you’re an admin for your organization but are not the GoDaddy account owner, you’ll need to follow the steps to manage security defaults in the Azure portal found at the bottom of the page.

Manage security defaults in the Email & Office Dashboard

You can enable or disable security defaults for your organization in the admin section of your Email & Office Dashboard.

  1. Sign in to your Email & Office Dashboard (use your GoDaddy username and password).
  2. Select Admin, and then Security Settings.
    admin dropdown in the email and office dashboard
  3. Under Protect Your Email with Security Defaults, select Manage.
    protect your email with security defaults section
  4. Select Continue.
    manage security defaults modal with continue highlighted
  5. Enter a domain name in your organization. The Enable security defaults toggle will load.
    • If there are linked domains in your organization, select See list of domains in this organization to see which domains will be affected by changes to security defaults.
    example domain name with enable security defaults toggle
  6. To enable or disable security defaults, turn on or turn off the Enable security defaults toggle, and then select Save.

You’ll see a confirmation that security defaults were enabled or disabled successfully.

Manage security defaults in the Azure portal

These steps only apply to admins who are not GoDaddy account owners. Please follow these steps carefully. Making changes in the Azure portal outside of these steps can cause issues with your organization, and our GoDaddy Guides can’t help you fix them. See our Statement of Support.

  1. Sign in to the Azure portal. Use your Microsoft 365 email address and password (your GoDaddy username and password won't work here). If you don't have access to your sign-in method, first reset your MFA.
  2. Search for Azure Active Directory.
    Search bar with Azure Active Directory
  3. Under Manage, select Properties.
    Properties in left panel
  4. Select Manage Security defaults.
    At bottom of page, Manage Security defaults
  5. Set the Enable Security defaults toggle to Yes. Or, set the toggle to No and choose a reason for disabling.
  6. Select Save. You'll see confirmation that your security defaults saved.
    Toggle Enable Security defaults to Yes
Required: If you already have Conditional Access policies enabled, you'll need to disable them before you can enable security defaults. Go to your Conditional Access Policies and select the policy. Under Details, select Delete, and then select Yes to confirm. Repeat as needed to remove all enabled policies.
If you already have Conditional Access policies enabled

Related step

More info