How to Secure Your Microsoft Account on Windows

Step by step

1. 1 min

   Enable two-step verification

   Open the Windows Settings app using Win + I. Navigate to Accounts, select Your info, and click the link to Manage my accounts. Sign in to the Microsoft dashboard, navigate to the Security tab, select Advanced security options, and toggle Two-step verification to On.

   Note: You must verify your identity via email or phone before enabling this feature.
2. 2 min

   Add the Microsoft Authenticator app

   Within the Advanced security options page, locate the Ways to prove who you are section. Select Add a new way to sign in or verify, choose Use an app, and follow the on-screen prompts to link your smartphone via the Microsoft Authenticator app.

   Note: Using a push-notification app is significantly more secure than SMS verification.
3. 1 min

   Review recent sign-in activity

   Return to the Security tab in your Microsoft account dashboard. Click on Sign-in activity to view a list of recent access attempts. If you identify any unrecognized locations or devices, select 'This wasn't me' to force a password reset and secure the account.

   Note: Check this list monthly to monitor for unauthorized access attempts.
4. 1 min

   Remove trusted devices

   Navigate to the Security tab and select Advanced security options. Scroll to the Trusted devices section and select Remove all the trusted devices associated with my account. This requires a fresh authentication for every device on your next login attempt.

   Note: Perform this action if you have sold or discarded old hardware.
5. 1 min

   Update recovery information

   Ensure your security contact info is current by visiting the Advanced security options page. Confirm that your linked email address and phone number are active. Outdated recovery information can permanently lock you out of your account during a security event.

   Note: Add at least two different methods of recovery to your account.