Use two-step verification with your Microsoft account

Two-step verification asks for a second proof after the password. The Authenticator app is the most reliable option. A phone number is a useful backup when you do not have the app.

1. Sign in at account.microsoft.com and open Security.
2. Under Advanced security options, turn on Two-step verification and follow the prompts.
3. Add the Authenticator app, then add a backup phone or email that you can still reach if the phone is lost.
4. Store the recovery code somewhere outside the phone, such as a printed copy in a safe place.

Microsoft will not text you a code and then call to ask you to read it aloud. That pattern is a common scam.