Windows 8.1 Two Step Verification

Two Step Verification

Two-step verification helps protect an account by making it more difficult for a hacker to sign in, even if they've somehow learned the password. If the user turns on two-step verification, they will see an extra page every time they sign in on a device that isn't trusted. The extra page prompts the user to enter a security code to sign in. Microsoft can send a new security code to a phone or alternate email address, or the user can obtain one through an authenticator app on their smartphone.

Two-step verification uses two ways to verify the identity whenever a user signs in to the Microsoft account:

• Password
• An extra security code.

Follow these steps to enable Two-step verification:

1. Sign in to Microsoft account.
2. Under Password and security info, tap or click Edit security info.
   Note: Because there is a change in sensitive info, the user might be prompted to enter a security code. Check the phone or alternate email for the code, enter it, and tap or click Submit.
3. Under Two-step verification, tap or click Set up two-step verification.
4. Tap or click Next, and then follow the instructions.

The user turned on two-step verification. How can he sign in to apps or devices that don't accept security codes?

Some apps (like the mail apps on some smartphones) or devices (like the Xbox 360, for example) can't prompt the user to enter a security code when they try to sign in. If the user gets an incorrect password error with an app or device, they will need to create a unique app password to sign in. Once signed in with the app password, they are all set to use that app or device. The user will need to create and sign in with an app password once for each app or device that can't prompt them for a security code.

1. Sign in to your Microsoft account.
2. Under Password and security info, tap or click Edit security info. If prompted for a security code here, enter it and tap or click Submit.
3. Under App passwords, tap or click Create a new app password. A new app password is generated and appears on the screen.
4. Switch to the app or device for which the user needs the password, and enter the app password displayed on the screen.

The user turned on two-step verification, but no longer uses the same alternate contact info. What do they do?

The alternate contact info helps keep the account secure, so if it's no longer current, the user needs to update it. They can provide new contact info and mark out-of-date email addresses or phone numbers to be deleted.

1. On the Microsoft account sign-in page, enter the email address and password.
2. On the Help us protect your account page, tap or click Use a different verification option.
3. If all the alternate contact information is out of date, choose "I don't have these any more" from the drop-down list, and then tap or click Next.
4. In the "I don't have my security info any more" page, tap or click Next, and then follow the instructions to add and verify the current contact info.