The basic steps to sign in

To log into a Microsoft account, go to account.microsoft.com in your web browser, enter your email address or phone number, then enter your password. Microsoft will then ask you to verify your identity — usually by sending a code to your email or phone — before letting you in. Once you pass that verification step, you are signed in and can access your files, settings, and subscriptions tied to that account.

The process takes about two minutes if you remember your password and have access to the email or phone number linked to your account. If you have forgotten your password or cannot receive the verification code, the sign-in process will offer you other ways to prove who you are, which we cover below.

You may also sign into Microsoft services without visiting account.microsoft.com directly. If you use Outlook, OneDrive, Microsoft 365, Xbox, or Windows, each of those services has its own sign-in screen, but they all use the same Microsoft account and password.

Key Takeaways

  • Go to account.microsoft.com, enter your email or phone number, then your password to start the sign-in process.
  • Microsoft will send a verification code to your email or phone and ask you to enter it before you can access your account.
  • If you forget your password, use the "Can't access your account" link on the sign-in screen to reset it using your recovery email or phone number.
  • If you cannot receive verification codes, you can prove your identity by answering security questions or using a backup code you saved earlier.
  • The same Microsoft account and password work across Outlook, OneDrive, Microsoft 365, Xbox, and Windows.

What to do if you forgot your password

On the Microsoft sign-in page, click the link that says "Can't access your account?" below the password field. Microsoft will ask you to enter your email address or phone number again, then offer you ways to reset your password. The most common option is to send a code to your recovery email address — the backup email you set up when you created the account. Check that email inbox, copy the code, and paste it back into Microsoft's form.

If you do not have access to your recovery email, Microsoft will let you answer security questions you set up in the past — usually questions like "What was the name of your first pet?" or "What city were you born in?" Answer those correctly and Microsoft will let you create a new password. Write down the new password somewhere safe before you sign in, or use a password manager to store it.

When you cannot receive the verification code

After you enter your password, Microsoft sends a code to your email or phone. If that code never arrives, first check your spam or junk folder — sometimes the email gets filtered there by mistake. Wait a full minute before assuming it did not send, because the email can take time to arrive.

If the code still does not show up, click "I don't have my phone" or "I can't use that email" on the verification screen. Microsoft will then offer you other ways to verify: you can answer security questions, use a backup code (a long string of numbers you may have saved when you first set up two-factor security), or sign in from a device you have used before. Pick whichever option you have the information for.

If none of those options work, click "I need more help" and Microsoft will walk you through additional verification steps, which may include uploading a photo of your ID or answering questions about your account history.

Signing in on Windows, Outlook, or other Microsoft services

If you are using a Windows computer, you can sign in with your Microsoft account during the initial setup, or later by going to Settings > Accounts > Your info and clicking "Sign in with a Microsoft account instead." On Outlook.com, OneDrive, or Xbox, you will see a sign-in screen that looks slightly different but works the same way: enter your email or phone number, then your password, then verify with a code.

The advantage of signing in across multiple services with the same account is that your files, contacts, and settings sync between them. Your OneDrive files appear in File Explorer on Windows. Your Outlook contacts appear in your phone's address book. Your Xbox achievements follow you across devices. But this also means that if someone gains access to your Microsoft password, they can access all of these services at once, so use a strong, unique password.

Setting up two-factor security to protect your account

Two-factor security means Microsoft asks for two pieces of proof that you are who you say you are: your password, plus a code sent to your phone or email. This makes it much harder for someone else to sign in even if they steal your password. To turn it on, go to account.microsoft.com, sign in, and click "Security" on the left side. Then click "Advanced security options" and toggle on "Require sign-in verification."

Microsoft will ask you to choose how you want to receive codes — usually by text message or email. You can add both. You can also set up a backup phone number or recovery email in case you lose access to your primary one. Once two-factor security is on, every time you sign in from a new device, Microsoft will send you a code and ask you to enter it. This takes an extra 30 seconds but stops most account theft.

Staying signed in across devices

When you sign in on a computer or phone, you will usually see a checkbox that says "Keep me signed in" or "Remember this device." Checking that box means you will not have to enter your password the next time you use that device — Microsoft will recognize it and let you in automatically. This is convenient for your personal computer but risky on a shared or public computer, so uncheck the box in libraries, schools, or internet cafes.

If you are signed in on a device you no longer use — an old phone, a computer you sold, or a work laptop you returned — you can sign out remotely. Go to account.microsoft.com, sign in, click "Security," then "Manage all devices." You will see a list of every device you have signed in on. Click any device and choose "Sign out" to end that session without having to physically access the device.

Frequently Asked Questions

Can I use a phone number instead of an email address to sign in?

Yes. When you create a Microsoft account, you can use either an email address or a phone number. At the sign-in screen, enter whichever one you used when you set up the account. If you want to switch, you can add a phone number or email to your account later in the security settings, then use either one to sign in.

What if I do not remember which email address I used for my Microsoft account?

Go to account.microsoft.com and click "Can't access your account?" Microsoft will ask you to enter any email address or phone number you think might be connected to your account. If it finds a match, it will show you a partial version of the email (like m***@example.com) and let you verify your identity to get back in. If nothing matches, you may need to create a new account.

Is it safe to save my password in my browser?

Saving your password in your browser is convenient but only safe on a device only you use. If you share a computer, do not let the browser save your Microsoft password — anyone with access to that computer can then access your email, files, and subscriptions. On your personal device, saving the password is reasonably safe, especially if your computer itself is password-protected.

Can I sign into the same Microsoft account on multiple devices at the same time?

Yes. You can be signed in on your phone, tablet, and computer all at once. Microsoft does not limit the number of devices. However, if you notice a device in your device list that you do not recognize, sign out of it when ready — it may mean someone else has your password.

What should I do if I think someone else has signed into my account?

Go to account.microsoft.com, click "Security," then "Recent activity." You will see a list of sign-ins with dates, times, and locations. If you see a sign-in you did not make, click it and mark it as "This wasn't me." Then change your password when ready and turn on two-factor security if you have not already. Check your recovery email and phone number to make sure they are still correct.