Outlook.com account MFA concerns

Page 2 of 2 FirstFirst 12

  1. NMI
    Posts : 1,094
    Windows 11 Pro, Version 22H2
       #11

    Is your mother using a phone or PC for Outlook? (You said she had MS Authenticator on a phone.)

    I don't think a phone can be entered as a trusted device:

    When you make your computer a trusted device, you won't need to enter a security code each time you try to access sensitive info, like credit card information associated with your Microsoft account.

    Setting your computer to be a trusted device can be useful if you use it often, if you have two-step verification enabled, or if you're using the Microsoft Authenticator app to sign in.

    Here's how to do it:

    1. On the device you want to trust, go to the Security settings page and sign in to your Microsoft account.

    2. You'll be prompted to verify your identity. Choose whether to receive the code through email, text, or an authenticator app. Once you have the code, enter it in the text box.

    3. Select the check box for Don't ask me again on this device.

    4. Select Verify.

    Add a trusted device to your Microsoft account
    I realize this doesn't help with your main question about why Outlook only asks for a password with MFA enabled.

    Is she using an Outlook app or the Outlook.com web site?
      My Computer


  2. Posts : 5,492
    Windows 11 Home
       #12

    win10freak said:
    My main question is this, where is the remove trusted devices at?
    https://account.live.com/proofs/mana...&refp=security

    You have to use Sign me out option. The way MS logins work, you have to log out of all devices.
      My Computer


  3. Posts : 867
    Win10
    Thread Starter
       #13

    So the Sign Me Out option was replaced instead of the Trusted Devices options?

    Those steps/guides which I posted are outdated and old, because I don’t see the Trusted Devices option from the Advanced Security settings.

    I helped my mom to setup her Outlook 2FA from my MacBook and then installed the MS Authenticator app on her iPhone.

    So I should try the Sign Me Out of all devices option?

    And after that, should I also clear the cookies as well?
      My Computer


  4. Posts : 5,492
    Windows 11 Home
       #14

    win10freak said:
    So I should try the Sign Me Out of all devices option?
    Yes, but if I recall correctly, it will also sing you out of MS Authenticator. Backup recovery code!

    win10freak said:
    And after that, should I also clear the cookies as well?
    That would be recommended.

    win10freak said:
    I helped my mom to setup her Outlook 2FA from my MacBook and then installed the MS Authenticator
    I would also suggest to remove SMS authentication method from MS account as well as from Google.
    SMS has 50 years old SS7 vulnerability, which has been abused a lot lately to bypass 2FA/steal accounts.
      My Computer


  5. Posts : 867
    Win10
    Thread Starter
       #15

    Yes, but what if she loses her phone or the phone gets damaged? Then I would think in order to regain access to her emails, then a backup email account would be useful to get the codes.

    As for the generating a backup recovery code, I can advise to use that instead and keep it in a secure place.
      My Computer


  6. Posts : 5,492
    Windows 11 Home
       #16

    Backup her credentials and MFA to your email/phone/Authenticator.
    My mother does not even know her email, let alone the password.
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 06:44.
Find Us




Windows 10 Forums