For a personal Microsoft account, open account.microsoft.com/security, sign in, then choose Manage how I sign in. Under Additional security, find Two-step verification, select Turn on, and follow the prompts. Microsoft may update the labels or options shown in the account settings.
Turn on two-step verification
- Go to account.microsoft.com/security and sign in to your personal Microsoft account.
- Select Manage how I sign in to see the available ways to prove your identity.
- Under Additional security, find Two-step verification and select Turn on.
- Follow the on-screen instructions to finish enabling it. The available choices and labels may vary as Microsoft updates its security settings.
Two-step verification uses two different forms of identity. Microsoft says it may ask for a code sent to an enrolled email address, phone, or authenticator app when you sign in on a device that is not trusted. The actual choices depend on the methods associated with your account.
As an Amazon Associate I earn from qualifying purchases.
Add Microsoft Authenticator
- In Manage how I sign in, select Add a new way to sign in or verify.
- Choose Use an app to display a QR code.
- Open Microsoft Authenticator on your phone, add a Personal account, and scan the QR code. If you cannot scan it, Microsoft provides a manual code-entry option.
- Complete the prompts. If you want a second step required for sign-ins, check that Two-step verification is turned on; adding Authenticator alone is not the same as enabling that setting.
Choose methods you can still reach
Set up more than one working verification method before you lose access to your phone or app. Microsoft recommends associating three pieces of security info with the account and allows up to 10 different ways to verify sign-in. Keep the methods current and make sure you can access them independently of your primary sign-in device.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →| Method | What to know |
|---|---|
| Authenticator app | Can provide codes while the phone is offline. Microsoft documents QR-code enrollment and manual code entry. |
| Email address | May be offered for verification or recovery; availability depends on the choices shown for your account. |
| Phone | Phone options may vary. Microsoft is phasing out SMS as an authentication and recovery method for personal accounts, so do not assume SMS enrollment will be offered. |
| Passkey | May be offered as a verification method; check the options available in your account. |
Prepare for recovery before you need it
- Download the Microsoft account recovery code and keep it somewhere separate from the device you use to sign in.
- If you lose a verification method, your password alone may not restore access. Microsoft warns that account recovery can take 30 days.
- When two-step verification is enabled, changes to security info can take 30 days to take effect. Avoid removing a working method until a replacement is set up and usable.
When an app password is relevant
Some older apps or devices cannot use the regular security-code process. Microsoft app passwords are available only when two-step verification is enabled and serve as a compatibility workaround for those legacy cases; they are not a substitute for setting up two-step verification for ordinary sign-ins.
#1 Best Overall
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Personal accounts versus work or school accounts
These steps apply to a personal Microsoft account. Work or school accounts may use an administrator-managed Microsoft Entra security-info setup with different methods and policies, so use your organization’s instructions for those accounts.
Quick Recap
Rank #4
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Rank #2
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.




