This guidance provides information to organisations on the approach being deployed by NHSmail for the adoption of Multi-Factor Authentication (MFA) for all users across the NHSmail platform from 3 July 2023, with full implementation expected to be finished by the end of June 2024. This guidance is correct at the date of publication and will be updated iteratively as planned activity is delivered.