How to turn on two-step verification in your Microsoft account

This guide walks you through switching on two-step verification for a Microsoft account, so a stolen password alone is not enough to get in. It suits anyone using Outlook, Hotmail, Xbox or other Microsoft services who wants a quick security upgrade. You only need your account login and a phone or authenticator app.

How To Turn ON Two Step Verification (2FA) In Microsoft Account, by WebPro Education on YouTube. 2 min 20 s.

Video length
2 min 20 s
Time to do it
5 minutes
Difficulty
Easy
Steps
7

What you need

Steps

  1. Open a browser and go to account.microsoft.com. Sign in with the Microsoft account you want to protect, such as your Outlook or Hotmail address.

  2. Click Security in the top menu bar, then choose Advanced security options. You may be asked to sign in again or confirm a code sent to your email.

  3. Find the Two-step verification section and click Turn on. Read the short explanation of how codes work, then click Next.

  4. Choose how you want to receive your security codes. An authenticator app is the strongest option, but you can also use an email address or a phone number.

  5. Follow the prompts to confirm your choice. If you pick the authenticator app, scan the QR code with the app and type the number it shows.

  6. Copy the recovery code Microsoft gives you and store it somewhere safe, such as a password manager or a printed note kept at home.

  7. Click Finish. Sign out and sign back in to check that a code is requested, so you know the setting is working.

Tips and common mistakes

Use an authenticator app instead of text messages when you can, since SMS codes can be intercepted.

Keep the recovery code away from your phone. If you lose the device, it is the only way back into the account.

Set up an extra email address or phone number as a backup so a lost phone does not lock you out.

Older mail apps that cannot show a code prompt may need an app password, which you create in the same security page.

Questions

Does this protect Outlook, Hotmail and Xbox too?

Yes. Two-step verification covers your whole Microsoft account, so the same code protects Outlook email, Office, Xbox and any linked device.

What happens if I lose my phone?

Use the recovery code you saved, or sign in on a trusted device and remove the lost phone from your security options. Then add a new phone number or authenticator.

Is two-step verification free?

Yes. Microsoft includes it at no cost for personal accounts, and you can turn it off again from the same Advanced security options page.

This guide was drafted from the video's details and general task knowledge. It has not been checked against the full video. Check the video and relevant product instructions before following a procedure. Report a correction.

More in Apps & Software

See all