6. Microsoft 365 Security: Recovery Info, Multi-Factor Authentication, POP and IMAP, and Password Policy (Video in Khmer)

Hello my friend! 🛡️ Email account is favorite target of hacker. If hacker get into one mailbox, they can send fake email to customer, steal data, or attack other staff. Today we learn protect Microsoft 365 with some important security setting.

What You Will Learn

✅ Add recovery email and phone for admin
✅ Set up Multi-Factor Authentication (MFA) for user
✅ Disable POP and IMAP for all mailbox
✅ Configure password expiration policy

Some Word You Need Know First

Recovery info: Backup email and phone number. If you forget password, Microsoft send code to here for reset.
MFA (Multi-Factor Authentication): Sign in need 2 thing: password + code from phone (app or SMS). Hacker steal password still cannot log in!
POP and IMAP: Old way for email app download mail. Hacker like use them for guess password.
Password expiration: Rule that force user change password after some day.

25 - Add Recovery Email and Phone for Admin (7:23)

Admin account is most important account in company. If admin forget password and no recovery info — big trouble! Add backup email and phone number, so you can reset password yourself any time.

26 - Set Up Multi-Factor Authentication for Users (6:57)

MFA is most important security setting in Microsoft 365. After turn on, user sign in with password, then confirm with Microsoft Authenticator app or code on phone. Even hacker know password, they cannot get in without user phone.

29 - Disable POP and IMAP for All Mailboxes (2:55)

Most user today use Outlook, Outlook mobile app, or Outlook on the web — they not need POP and IMAP. Turn them off make your company more safe, because hacker cannot use these old way for attack.

30 - Set Up Password Expiration Policy (4:09)

Learn how to set password expire after some day, or set password never expire. Choose what fit your company rule.

Quick Security Checklist

✅	Setting	Why
☐	Admin have recovery email and phone	Can reset password when forget
☐	MFA on for all user (admin first!)	Stolen password not enough for hacker
☐	POP and IMAP off (if not need)	Close old door that hacker like
☐	Password policy match company rule	User password stay safe

Tips

Turn on MFA for admin first, then all user. One hacked admin = whole company in danger.
Use Microsoft Authenticator app better than SMS. SMS can be steal with SIM swap.
Before turn on MFA for everyone, tell staff first and show them how to set up. No surprise, less problem.
Recovery email for admin should be different email, not inside same Microsoft 365. If tenant have problem, you still get code.
Check first if any staff or old system (like scanner or app) still use POP or IMAP before turn off. Turn on again only for mailbox really need.
Microsoft now recommend long password + MFA better than force change password often. Force change too often make user choose weak password like Password1, Password2...
Never share admin password with many people. Give each admin their own account.

Conclusion

Now your Microsoft 365 more safe: admin have recovery info, user use MFA, POP and IMAP closed, and password policy ready. Security is not one-time job — check these setting often. Keep learning my friend! 💡