Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallTo secure a personal Microsoft account, turn on two-step verification, add a passkey or another sign-in method, and keep multiple recovery methods current. A passkey replaces the password at sign-in; two-step verification adds another identity check. They can work together, but they are not the same thing.
First, check whether this is a personal or work account
These steps apply to a personal Microsoft account, such as the one used for consumer Microsoft sign-in. Work or school accounts may be governed by an organization’s administrator, who can enable or restrict sign-in methods. Microsoft’s work or school security-key guidance describes a separate, administrator-managed process; do not assume its requirements apply to a personal account.
As an Amazon Associate I earn from qualifying purchases.
Turn on two-step verification
- Sign in to account.microsoft.com/security.
- Select Manage how I sign in.
- Find Two-step verification under additional security and follow the prompts shown for your account.
Microsoft’s setup uses two forms of identification, commonly a password plus a security-information method. When you sign in on a new or untrusted device, Microsoft may ask for a code or another verification step. The available choices can differ by account; the security screen is authoritative. Microsoft describes the process in its two-step verification instructions.
Choose a passkey or another passwordless method
A passkey is a password replacement saved in a supported credential manager or device and unlocked locally with a biometric or device PIN. Microsoft calls passkeys “secure, phish-resistant replacements for your password” in its security-info guidance. Passwordless sign-in is broader: it can include passkeys as well as other options, such as Authenticator approval, Windows Hello, Outlook for Android, or SMS when offered. Authenticator can also provide one-time codes for two-step verification, so using the app does not necessarily mean you have created a passkey.
#1 Best Overall
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Create a passkey
- Open your account’s Advanced security options.
- Select Add a new way to sign in or verify, then choose Passkey or the Authenticator passkey option if it appears.
- Choose an eligible storage location and complete the device’s unlock step. A phone-based setup may involve scanning a QR code; Bluetooth pairing may be needed for phone or tablet verification.
Microsoft’s passkey setup instructions list password managers, phones or tablets, physical security keys and Windows devices as possible locations. The choices depend on the device and sign-in screen you use.
Compare the practical options
| Method | How it works | What to consider |
|---|---|---|
| Passkey in a credential manager | Saved and, where supported, synced through a credential manager. | Access across devices depends on the manager and the device used to sign in. |
| Passkey on a phone or tablet | Unlocked on that device with its biometric or PIN; setup or sign-in may use a QR code and Bluetooth. | Plan for a replacement or lost phone before relying on it as your only method. |
| Windows Hello | A local Windows device-based sign-in or passkey option. | You need access to the eligible device when that sign-in method is required. |
| FIDO2 security key | Separate hardware key; Microsoft documents USB and NFC options, with PIN or fingerprint unlock. | Confirm the key, browser and device are compatible with your sign-in flow before buying. See Microsoft’s personal-account security-key instructions. |
| Microsoft Authenticator | Can provide a one-time code, verify a sign-in, or approve passwordless sign-in; a passkey option may also appear. | Account for loss, replacement or inaccessibility of the phone that has the app. See Microsoft Authenticator sign-in guidance. |
No single method is guaranteed to appear in every account or sign-in scenario. Choose a method you can use reliably, then add independent ways to verify your identity.
Rank #2
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Keep recovery access usable
Set up recovery before removing a password or depending on one new device. Microsoft recommends associating three pieces of security information with an account because losing access to one method can make recovery difficult. Add more than one current verification method where available, and keep contact details up to date. See Microsoft’s recovery and two-step verification guidance and instructions for adding security information.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Scan for outdated or missing drivers - takes under a minuteDriver Scan →There is an important recovery consequence: with two-step verification enabled, forgetting the password may require two contact methods to reset it. If you lose a contact method, the password alone may not restore access. Microsoft warns that regaining access can take 30 days. Make sure you can still reach your backup email, phone or other listed method before changing or replacing one.
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Check older apps and Microsoft’s SMS phase-out notice
Some older apps and devices—including Outlook 2010, Xbox 360 and certain mail-sending devices—may need an app password after passwordless setup. Check whether the older client or device you rely on supports your intended sign-in method before switching. Microsoft explains this limitation in its passwordless account guidance.
Microsoft says it will begin phasing out SMS for authentication and account recovery on personal Microsoft accounts. Its support information does not specify an end date or a rollout schedule for individual accounts. Check your account’s current security screen for the methods available to you, and avoid making SMS your only recovery route.
Quick Recap
Rank #4
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
