Two-step sign-in codes

Many accounts ask for two things when you sign in: your password, and a short code sent to you at that moment. This is two-factor authentication, also called two-step verification. The code proves it is really you, because only you hold your phone or your email. Apple and Google both require it on the accounts you will use to publish an app.

Where codes come from

• Microsoft: a code by text message or email, or a tap in the Microsoft Authenticator app on your phone, when you sign into your Microsoft account somewhere new.
• Apple: a six-digit code pops up on your iPhone or iPad, or arrives as a text message.
• Google: a "Is it you?" tap on your phone, or a text message.
• Email: some services, including Claude, send a code or a link to your email address instead of using a password.
• An authenticator app: some services show a square barcode to scan. After that, an app on your phone shows a fresh six-digit code every 30 seconds.

In every case, the screen that asked for the code is the only place you type it.

The one rule

Nobody legitimate ever asks you for a code. Not Microsoft, not Apple, not your bank, not Claude, not a "support agent" on the phone. A code only travels one way: from your phone or email, into a sign-in screen you opened yourself. If a person asks for it, say no and hang up.

Turn on two-step for your Microsoft account

If you sign into the PC with a Microsoft account, protect it now. It also holds your saved passwords.

1. In Edge, go to account.microsoft.com/security and sign in.
2. Click Manage how I sign in (on some screens: Advanced security options).
3. Find Two-step verification and click Turn on.
4. Follow the steps. The simplest choice is a code by text message to your phone number. Microsoft may also offer its Authenticator app.
5. Microsoft shows a recovery code at the end. Write it on your paper list.

If you use a local account on the PC, skip this. Do it for your email account instead: both Outlook.com and Gmail have the same setting under their security pages.

Check your phone's account too

Practice

1. Turn on two-step for your Microsoft account, or your email account, using the steps above.
2. Write "Codes for my Microsoft account come by text to my phone" (or whatever you chose) on your paper list, so future you remembers.