Before you start
Confirm that you can access your account and backup contact methods. Microsoft recommends keeping three pieces of security information available so that losing one method does not leave you locked out.
Work or school account? Your organization decides which verification methods are allowed. These personal-account steps do not override its policies; ask your IT team for the supported setup.
Open the authenticator setup
- Sign in at Microsoft account security.
- Choose Manage how I sign in, then the option to add a new sign-in or verification method.
- Select Use an app.
- Choose the option to set up a different authenticator app, then continue to the QR code.
Keep that page open while you add the account to Sign In.
Add Microsoft to Sign In
For verification codes on iPhone, we recommend Sign In, our authenticator app. It generates your codes on your device.
- With Microsoft’s QR code on another screen, choose Add → Scan QR Code in Sign In.
- On one iPhone, use Microsoft’s option for being unable to scan the barcode to reveal the manual key. In Sign In, choose Add → Enter Setup Key. Set Service to Microsoft, use your email address as the Account label, and paste the key into Key.
- Review the details and tap Add Account.
- Return to Microsoft, enter the current six-digit code from Sign In, and complete the registration prompts.
Keep the setup key private. Sign In codes are separate from Microsoft’s approval notifications.
Turn on two-step verification
Registering an authenticator alone does not turn on two-step verification. Return to Manage how I sign in. Under Additional security → Two-step verification, choose Turn on, complete the prompts, and confirm that it is enabled.
Other supported methods
Verified email addresses can provide another way to receive a code. Secure those email accounts too. Microsoft also supports passkeys, which provide phishing-resistant sign-in using a device unlock such as a fingerprint or PIN.
SMS is being phased out for personal Microsoft accounts. Do not build your recovery plan around being able to add or keep a phone-number method. Check the methods actually offered in your account and maintain an accessible alternative.
Create a recovery code
- Open your account’s additional security settings.
- Find Recovery code and generate a new code.
- Print it and store it safely away from the device you use to sign in.
A new code invalidates the previous one. Microsoft cannot display an existing recovery code again, so save it when generated.
If you lose your sign-in methods, follow Microsoft’s recovery-code instructions. Recovery is not instant: with two-step verification enabled, changes through that process take 30 days to take effect. Do not assume support can bypass verification.
Troubleshooting
Code rejected: check the account selected in Sign In, wait for a fresh code, and check your iPhone’s automatic date and time settings.
An older app rejects your password: some older apps cannot complete a second verification step and may require an app password. Follow Microsoft’s guidance for that specific app instead of disabling two-step verification.
Missing a verification method: check whether you are using a personal account or an organization-managed account. Available options and recovery policies differ.