About two-step verification

Two-step verification helps protect you by making it more difficult for someone else to sign in to your Microsoft account.

If you turn on two-step verification, you'll get a security code to your email, phone or authenticator app every time you sign in on a device that isn't trusted. When it's turned off, you only get and re-send security codes periodically, and when there might be a risk to your account security.

To turn two-step verification on or off

  1. Go to the Security settings page and sign in with your Microsoft account.

  2. Under Two-step verification, choose Set up two-step verification to turn it on, or choose Turn off two-step verification to turn it off.

  3. Follow the instructions.

Show all

Where you can't use security codes, use app passwords

Some apps (like the mail apps on some phones) or devices (like the Xbox 360, for example) can't use regular security codes. If you see an "incorrect password" error on an app or device after you've turned on two-step verification, but you're sure your password was correct, that's a sign that you'll need an app password for that app or device.

To get an app password

  1. Go to the Security settings page and sign in with your Microsoft account.

  2. Under App passwords, click Create a new app password. The new, unique app password will appear on your screen.

  3. In the app or device you're trying to use, enter that new app password instead of your usual password.

Need more help?