How to Secure Your Microsoft Account on Windows

Follow these steps to harden your Microsoft account security on Windows, enable multi-factor authentication, and review active sessions.

1. Enable two-step verification. Open the Windows Settings app using Win + I. Navigate to Accounts, select Your info, and click the link to Manage my accounts. Sign in to the Microsoft dashboard, navigate to the Security tab, select Advanced security options, and toggle Two-step verification to On.
2. Add the Microsoft Authenticator app. Within the Advanced security options page, locate the Ways to prove who you are section. Select Add a new way to sign in or verify, choose Use an app, and follow the on-screen prompts to link your smartphone via the Microsoft Authenticator app.
3. Review recent sign-in activity. Return to the Security tab in your Microsoft account dashboard. Click on Sign-in activity to view a list of recent access attempts. If you identify any unrecognized locations or devices, select 'This wasn't me' to force a password reset and secure the account.
4. Remove trusted devices. Navigate to the Security tab and select Advanced security options. Scroll to the Trusted devices section and select Remove all the trusted devices associated with my account. This requires a fresh authentication for every device on your next login attempt.
5. Update recovery information. Ensure your security contact info is current by visiting the Advanced security options page. Confirm that your linked email address and phone number are active. Outdated recovery information can permanently lock you out of your account during a security event.