
Other things we recommend to increase security:
#Online data backup how to
For info about how to do this, see Set up multi-factor authentication for Microsoft 365 users. When you roll out two-factor authentication, start with your global admins, and then other admins and site collection admins. The second factor can be made through a phone call, text message, or app. This prevents credentials from being used without a second factor and mitigates the impact of compromised passwords. One of the most important things you can do to safeguard your data is to require two-factor authentication for your identities in Microsoft 365. To learn how to turn on or off Customer Lockbox and approve and deny requests, see Microsoft Purview Customer Lockbox Requests. The engineer gets access only to the file in question. You can also turn on a feature called Customer Lockbox, so you need to approve the request.

An audit event is generated that you can view in the Microsoft 365 admin center. In rare cases where Microsoft engineers need access to content (for example, if you submit a support ticket because a user can't access an important file that we believe is damaged), the engineers must check in a specific workflow that requires business justification and manager approval. Eligibility is checked, and if engineer access is approved, it's only for a limited time. When engineers need access, they must request it. No engineer has standing access to the service. Check-ins to the service require code review and management approval. We perform day-to-day tasks by running workflows so we can rapidly respond to new situations.

Microsoft engineers administer SharePoint and OneDrive using a PowerShell console that requires two-factor authentication. For more info about the ownership of your data, see Microsoft 365 Privacy by Design.

When you put your data in SharePoint and OneDrive for Microsoft 365, you remain the owner of the data.
