Microsoft account security
Most Windows PCs sign in with a Microsoft account. That account is the key to your device, your email, and often your files, so it's worth protecting well. Three steps do the heavy lifting.
Reading is great. Tracking makes it stick. Sign up for a free Dashboard to tick off tasks and see your Security Score.
Get my free Dashboard →Cyber Nova AI helps you prepare for Cyber Essentials. It doesn't award or certify it. Follow the steps here to get ready, then apply for certification through an accredited Cyber Essentials body when you're set.
Turn on two-step verification
Two-step verification means a password alone isn't enough to get in. Sign in at account.microsoft.com, go to Security, and turn on two-step verification. You'll approve future sign-ins with your phone or an authenticator app. This single step blocks the vast majority of account takeovers.
Check your recovery details
If you ever lose access, recovery details get you back in, and they stop an attacker locking you out. In the same Security area, confirm your recovery email and phone number are current.
Look at recent activity
Still under Security, open Recent activity. It lists recent sign-ins and where they came from. If anything looks unfamiliar, change your password and sign out of all devices.
Microsoft account vs local account
A Microsoft account syncs across devices and supports two-step verification. A local account stays on one PC only. For most people the Microsoft account is the better choice, mainly because of that two-step protection.
Track your Windows security progress. Free.
Create a free account to tick off tasks, see your Security Score improve, and know exactly what you've done and what's still to do.
Start your free security check