

If somebody else tries to sign in as you, however, they'll enter your username and password, and when they get prompted for that second factor they're stuck! Unless they have YOUR smartphone, they have no way of getting that 6-digit number to enter. You open the app on your smartphone, it shows you a unique, dynamically created 6-digit number that you type into the site and you're in. Perhaps you're using the free Microsoft Authenticator app as your second factor. The first time you sign in on a device or app you enter your username and password as usual, then you get prompted to enter your second factor to verify your identity. If that's all you need then anybody who knows your username and password can sign in as you from anywhere in the world!īut if you have multifactor authentication enabled, things get more interesting. Let's say you're going to sign into your work or school account, and you enter your username and password. How does multifactor authentication work? Something you are - Like a fingerprint, or facial recognition. Something you have - Like a smartphone, or a secure USB key. Something you know - Like a password, or a memorized PIN. The three most common kinds of factors are: For example, a password is one kind of factor, it's a thing you know. If you lose your security info and you don't have a backup contact method available, you can permanently lose your account.įind out more about the Microsoft Authenticator app.A factor in authentication is a way of confirming your identity when you try to sign in. Note: Before you turn on two-step verification, make sure you've associated at least three unique security contact email addresses or phone numbers with your account for backup purposes. Under the Two-step verification section, choose Set up two-step verification to turn it on, or choose Turn off two-step verification to turn it off. Go to Security settings and sign in with your Microsoft account.

If you've turned off two-step verification, you'll get and resend security codes periodically, along with any time there's a risk to your account security. If you don't want to use email, a phone call, or text, you can use the Microsoft Authenticator app to help strengthen your account security and to sign-in without passwords. Every time you sign in to an untrusted device while you have two-step verification turned on, you'll get a security code in email or on your phone, making sure you’re you.
