The basic steps to sign in

To log into your Microsoft account, go to account.microsoft.com in your web browser and enter your email address or phone number in the sign-in box. Then enter your password when prompted. If you have two-step verification turned on, you will need to confirm your identity using a second method — usually a code sent to your phone or generated by an authenticator app.

On Windows computers, tablets, or phones, you can also sign in directly through your device settings instead of using a web browser. On Windows 10 or 11, go to Settings, select Accounts, then Your info, and choose Sign in with a Microsoft account. The process is similar on phones: open Settings, find Accounts or Users, and select your Microsoft account.

If you do not remember your password, click "Can't access your account?" on the sign-in page. Microsoft will ask you to verify your identity using a recovery email, phone number, or authenticator app before letting you reset it.

Key Takeaways

  • The main sign-in page is account.microsoft.com, where you enter your email address or phone number and your password.
  • Two-step verification requires a second form of proof — usually a code texted to your phone or generated by an app — before you can sign in.
  • On Windows devices, you can sign in through Settings instead of a web browser, which links your device to your account.
  • If you forget your password, use the "Can't access your account?" link to verify your identity and create a new one.

What two-step verification does and why it matters

Two-step verification adds a second security layer by requiring proof of identity beyond just your password. Even if someone learns your password, they cannot sign in without access to your phone, email, or authenticator app. Microsoft calls this feature two-step verification or two-factor authentication.

When you turn on two-step verification, Microsoft sends a code to your phone or email each time you sign in from a new device or browser. You enter that code to complete the sign-in. You can also use an authenticator app like Microsoft Authenticator, Google Authenticator, or Authy, which generates codes without needing to receive a text or email.

You can turn on two-step verification in your account settings under Security. Go to account.microsoft.com, select Security, then choose Advanced security options, and follow the prompts to add a phone number or authenticator app.

Signing in on Windows, Mac, and mobile devices

On a Windows computer, you can sign in with your Microsoft account during setup or later through Settings. Go to Settings, select Accounts, then Your info. If you see "Sign in with a Microsoft account" at the top, click it and enter your email and password. This links your Windows user account to your Microsoft account, so your settings and files sync across devices.

On a Mac, Microsoft account sign-in works differently because macOS does not use Microsoft accounts natively. Instead, you sign in to individual Microsoft apps like Outlook, OneDrive, or Office. Open the app, select Sign in, and enter your Microsoft email and password.

On iPhone or Android, open the Microsoft account app or go to account.microsoft.com in your browser. Enter your email and password. Some Microsoft apps like Outlook or OneDrive let you sign in directly within the app instead of using the account website.

What to do if you are locked out of your account

If you cannot sign in after several attempts, Microsoft may temporarily lock your account for security reasons. Wait 24 hours before trying again, or use the "Can't access your account?" link when ready to verify your identity and regain access.

To verify your identity, Microsoft will ask you to confirm a recovery email address, phone number, or answer security questions you set up earlier. If you no longer have access to those recovery methods, you can use a government ID or credit card to verify yourself, though this process takes longer.

If you set up an authenticator app or backup codes when you turned on two-step verification, you can use those to sign in even if your phone is unavailable. Backup codes are one-time passwords Microsoft gives you when you first enable two-step verification — save them somewhere safe.

Recovering a forgotten password

Click "Can't access your account?" on the sign-in page at account.microsoft.com. Microsoft will ask you to enter your email address or phone number, then verify your identity using a recovery email, phone number, or authenticator app.

Once verified, you can create a new password. Make it at least 8 characters long and include uppercase letters, lowercase letters, numbers, and symbols for stronger security. Avoid using the same password across multiple accounts — if one site is hacked, attackers can try that password on your other accounts.

If you no longer have access to your recovery email or phone number, select "I can't use any of these options" and Microsoft will ask for additional proof, such as a government ID or credit card. This verification can take several days.

Managing your account settings and security

Once you are signed in at account.microsoft.com, you can update your profile picture, change your password, add or remove recovery methods, and control which apps have permission to access your account. The Security section shows your recent sign-in activity and lets you sign out of other devices remotely.

Under Privacy, you can control what data Microsoft collects about your browsing and device use. Under Subscriptions, you can manage Microsoft 365, Game Pass, or other paid services linked to your account. Under Devices, you can see which computers, phones, and tablets are signed in and remove any you no longer use.

Review your account settings regularly, especially after signing in from a new device or location. If you see sign-in activity you do not recognize, change your password when ready and check your recovery methods to make sure no one else can access your account.

Frequently Asked Questions

What is the difference between a Microsoft account and a Windows user account?

A Windows user account is local to your computer, while a Microsoft account is cloud-based and syncs across devices. If you sign in with a Microsoft account on Windows, your settings, files, and preferences move with you to other computers. A local account stays only on that computer.

Can I use a phone number instead of an email to sign in?

Yes. During sign-in, you can enter a phone number instead of an email address. Microsoft will send a code to that phone to verify your identity. You can add a phone number as a recovery method in your account settings.

What should I do if I do not recognize a sign-in on my account?

Go to account.microsoft.com, select Security, and review your recent activity. If you see a sign-in from an unfamiliar location or device, change your password when ready and turn on two-step verification if you have not already. You can also sign out of all other devices from the Security page.

Can I have more than one Microsoft account?

Yes. You can create multiple Microsoft accounts using different email addresses or phone numbers. Each account is separate, with its own password, files, and settings. You can sign in to different accounts on the same device, but only one account can be active at a time.

Is it safe to save my password in my browser?

Saving passwords in your browser is convenient but less find than remembering them or using a password manager. If someone gains access to your computer, they can see saved passwords. A dedicated password manager like Bitwarden or 1Password encrypts your passwords and is generally safer.