Learn · Your accounts
Lock down your Microsoft account
10 min · essential
Why this matters. Your Microsoft account unlocks Outlook email, OneDrive files and often your Windows PC. A password alone gets stolen in data breaches and phishing. A passkey (your face, fingerprint or PIN) or two-step verification means a stolen password isn't enough. Recovery info is what gets you back in if you're ever locked out.
1
Open your account's security page
Go to account.microsoft.com/security and sign in. Select Manage how I sign in.
account.microsoft.com › Security
Manage how I sign in
Start here
Sign-in activity
Password
2
Add a passkey and turn on two-step verification
Choose Add a new way to sign in or verify, and add a passkey (face, fingerprint or PIN) or the Microsoft Authenticator app. Then under Additional security, turn on Two-step verification.
Security › Manage how I sign in
Ways to prove who you are
Add a new way to sign in or verify
Passkey + two-step
Additional security
Two-step verification
Microsoft is moving away from text-message codes for personal accounts, so add an app or passkey, not just a phone number.
3
Check recovery info and recent activity
Make sure a recovery email you still use is listed. Then open Sign-in activity and look for sign-ins from places you've never been. If you see one, change your password now.
Check your understanding
Why isn't a strong password enough on its own?
Passwords leak in breaches and phishing. A passkey or second step means a stolen password can't get in by itself.
Want a checklist that tracks this for your whole family? Sign in to HomeOS.
Checked against:
Microsoft: How to use two-step verification with your Microsoft account · Microsoft: Security info & verification codes
· last reviewed 2026-09