Microsoft account and phone number linked

Microsoft account password recovery requires two verification codes being sent using two different verification methods. Each Microsoft account has at least two verification methods, the phone number and additional email address which are asked and required when you set up a new Microsoft account with a new hotmail.com or outlook.com email or using a third party email.

When the thief who got your phone tries to recover your password, all your verification methods / security info phone numbers and email addresses will be listed for him to select one. OK, the thief naturally selects your phone number, gets the code sent as a text message, and enters it.

But, clicking Next after entering the code he needs to select another security info contact (phone / email) from the list to receive second verification code.

Password recovery is not possible with just your phone, the system is clever enough to make it impossible by requiring two codes being sent to two different phones and / or emails.

You can add as many phone numbers and email address as you wish as security info contacts at https://account.live.com/proofs/mana...&refp=security. I wholeheartedly recommend that you add at least another security email address; if you only have one phone number and one email added, those which were required when you set up the Microsoft account, and that thief got your phone, the recovery would be as impossible to you as it is to him, you both having access to just one of required two verification methods.

Kari