Windows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallOutdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchiTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
To add another verification method to a personal Microsoft account, open account.microsoft.com/security, choose Manage how I sign in, then select Add a new way to sign in or verify. Pick an available option, complete the code or device confirmation, and it will be available the next time Microsoft asks you to verify your identity. Microsoft says one account can have up to 10 different ways to verify sign-in.
What adding a new verification method does
A second sign-in method gives you another way to prove that you own the account when Microsoft requests a code, device approval or biometric check. It is especially useful if your primary phone is lost, your number changes, or you cannot access an old email address. Microsoft describes an additional method as a way to increase account security and help recover access when an existing method is unavailable.
The choices shown are account-specific. Microsoft may offer a recovery email address, Microsoft Authenticator, a passkey or a phone number, but not every account receives every option. For a work or school account, your administrator can also require, hide or restrict methods.
Before you add anything
- Identify the account type. Personal accounts use the Security page at account.microsoft.com/security. Work and school accounts normally use the Security info page in My Sign-Ins or an organization’s sign-in wizard.
- Keep your current method available. You may need an existing code, approval or password to reach the security settings.
- Prepare the new device or contact. Have the phone with the new number, access to the new email inbox, the Microsoft Authenticator app, or the passkey-capable device ready.
- Use an address or number you can reach later. A method that works today but belongs to an employer, school or former mobile plan can leave you locked out when that access ends.
Add a method to a personal Microsoft account
- Open account.microsoft.com/security and sign in.
- On the Security page, select Manage how I sign in.
- Select Add a new way to sign in or verify.
- Choose one of the methods Microsoft offers. Depending on the account, this can include a recovery email, Microsoft Authenticator, a passkey or a phone option.
- Complete the requested proof. For an email address or phone number, Microsoft sends a code to that new destination. Enter the code and select Next.
- Return to the list of sign-in methods and confirm that the new entry appears. Keep the existing method until you have tested the replacement.
The phone option is not available for every personal account. If it is missing, use one of the methods Microsoft displays rather than trying to force an unsupported number.
#1 Best Overall
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Add a recovery email address
Choose the email option from the available methods, enter the address, retrieve the verification message and submit its code. A recovery address can be useful when your phone is unavailable, but it is only dependable if you retain access to that inbox. Microsoft specifically warns that losing a work or school email address can prevent access to the account, so use a long-term personal address where possible.
Add a phone number
If Microsoft presents a phone option, enter the number in the requested format and choose where to receive the code, such as text message or an offered call option. Type the one-time code and select Next. A phone number is tied to your carrier service, so add another method as a backup before changing numbers or cancelling a plan.
Check the account’s method limit
Microsoft’s current support guidance says you can add up to 10 different ways to verify sign-in. The limit applies to the account’s collection of verification methods, so remove obsolete entries instead of repeatedly adding numbers or addresses you no longer control.
Free tools Windows power users keep installed
One-click scans. No signup required.
Add Microsoft Authenticator
Authenticator enrollment links the app to your Microsoft account. It can provide approval prompts and, where enabled, generate verification codes. Code generation can work without a mobile-data connection, which is useful while travelling or in an area with unreliable reception.
Rank #2
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
- From Add a new way to sign in or verify, choose Use an app.
- Select Next. Microsoft displays a QR code for the account.
- Open Microsoft Authenticator on your phone, tap the + button, and choose Personal account.
- Use the camera to scan the QR code shown on your computer or other screen.
- Complete the test approval or code entry Microsoft requests, then finish the setup.
If the camera cannot scan the image, select the manual setup option shown by Microsoft and enter the account details or code in Authenticator. Keep the setup screen open until the manual entry is complete; closing it can require you to start enrollment again.
Choose how Authenticator will be used
Microsoft documents three distinct Authenticator arrangements:
- Verification method: Authenticator is one available way to approve a sign-in or enter a code.
- Two-step verification at every sign-in: Microsoft asks for the Authenticator approval or code whenever the account’s two-step policy requires it.
- Passwordless sign-in: Authenticator becomes the account’s only passwordless sign-in method, replacing password entry for that flow.
These are different settings, not three separate apps. Select the arrangement that matches your security policy and the devices you can reliably keep charged and with you.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Use a passkey instead of SMS
A passkey is a phishing-resistant alternative to a password and code. It uses a face scan, fingerprint or device PIN to unlock a credential stored on a compatible device. Because the verification is bound to the device and its unlock method, there is no SMS code to copy from a message.
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
To add one, select Passkey when it appears under Add a new way to sign in or verify, follow Microsoft’s on-screen prompt and complete the device’s biometric or PIN check. The exact prompt depends on the operating system, browser and hardware. If Passkey is not listed, that account or sign-in context does not currently offer it; choose another displayed method or check whether an organization policy controls the list.
Add a physical security key
Microsoft documents physical security keys for work or school accounts. A FIDO2 key connects over USB or communicates through NFC and is designed to resist phishing. It is separate from a phone-based Authenticator enrollment and must remain available when you need to sign in.
- Open your organization’s Security info page in My Sign-Ins or the sign-in wizard supplied by the organization.
- Select Add method.
- Choose Security key.
- Select USB or NFC, according to the key you have.
- Insert the USB key or present the NFC key when prompted, then touch or otherwise activate it as directed.
- Give the key a recognizable name and finish registration.
Confirm that your organization permits security keys before purchasing one. Microsoft’s method list and your administrator’s policy determine whether the option appears and whether the key can be used for both sign-in and password reset.
Personal accounts versus work and school accounts
Personal Microsoft accounts
For a personal Outlook.com, Xbox, OneDrive or similar Microsoft account, use the Security page at account.microsoft.com/security. The labels Manage how I sign in and Add a new way to sign in or verify are the key navigation points. Microsoft decides which choices are offered for that account and region.
Rank #4
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Work or school accounts
Work and school accounts use Security info rather than the personal-account page. Open My Sign-Ins, choose the Security info area, or follow the organization’s sign-in wizard. An administrator may require a particular method, prevent users from registering another one, or remove options that are available on personal accounts.
The purpose of a method can also differ in an organization. Microsoft’s work-and-school guidance lists Authenticator, phone calls and security keys as methods that can support two-factor verification and password reset. Email is listed for password-reset authentication only, so an email entry may not satisfy a policy that requires a second factor during sign-in.
| Method | Phishing resistance | Works without a live phone connection | Typical capability | Important limitation |
|---|---|---|---|---|
| Passkey | Designed to resist phishing | Uses the enrolled device; live SMS service is not required | Sign-in using face, fingerprint or device PIN | Requires a compatible device and must be offered for the account |
| USB or NFC security key | Designed to resist phishing | Yes, once the physical key is available | Two-factor sign-in and, where policy allows, password reset | Commonly governed by work or school administrator policy |
| Microsoft Authenticator | Approval is stronger than sharing a code, while generated codes are still codes | Generated codes can work offline | Approval prompts, verification codes or passwordless sign-in | Depends on access to the enrolled phone |
| Phone number | Code-based; not phishing-resistant in the way a passkey or security key is | No; delivery depends on the offered text or call service | Verification and, in some work accounts, password reset | May not be offered for every personal account and depends on carrier access |
| Email address | Code-based; not phishing-resistant in the way a passkey or security key is | No; you must reach the inbox | Recovery and, in work accounts, password-reset authentication | May not count as a second factor for work or school sign-in |
Use the strongest option that fits your devices and policy, then keep a separate backup. A passkey or security key reduces exposure to phishing, while Authenticator can be a practical backup when you need offline code generation. Codes sent by phone or email remain useful for recovery but depend on access to the delivery channel.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Replace a lost phone, number or email safely
If you can still sign in, add and confirm the replacement method before deleting the one you lost. This order prevents a small device change from becoming an account-recovery event.
Best Value
- Security Key : Protect your online accounts against unauthorized access by using FIDO2 and U2F authentication with T110. It's the world's most protective security key that works with windows, Mac OS, Linux as well as Chrome, Firefox, Edge and many other major browsers.
- Certified with the new FIDO2 standard, T110 provides the benefit of fast login and strong protection against phishing, account takeover as well as many other online attactks.
- Works with : Bank of America, Github, Google, Microsoft, DUO, Twitter, Facebook, Dropbox, Apple, ebay, BINANCE, mor and more.
- Fits USB-A port : Insert the T110 security key into the USB-A port of each service and log in conveniently with one touch
- For the driver download and user guide, please visit TrustKey Solutions Home support page.
- Sign in using any method that still works.
- Open the account’s security settings and add the new phone, email, Authenticator enrollment, passkey or security key.
- Complete the code, QR scan, biometric check or physical-key confirmation.
- Test the new method in a separate sign-in, if the account provides a test or sign-out option.
- Only after confirmation, remove the lost or inaccessible method.
Do not replace every security detail in one operation. Microsoft cautions that changing all security information at once can place the account under a 30-day restriction. During that period, security changes may be limited, so preserve at least one working method whenever possible.
When Microsoft says “Help us secure your account”
This prompt asks for an alternate email address or phone number that you can access. Enter the reachable contact, retrieve the code Microsoft sends there, and select Verify. The alternate contact does not have to belong to you, but you must be able to open the inbox or receive the call or message. Use a trusted contact only with permission, and do not leave a temporary address as your permanent recovery method.
Troubleshooting missing methods and failed setup
The phone or email option is missing
Availability varies by account. A personal account may not offer phone verification, and a work or school tenant may hide email, SMS or other methods through policy. Use the choices shown on the page, or ask the organization’s administrator which methods are allowed. Do not assume that a method available on one Microsoft account will appear on another.
The Authenticator QR code will not scan
- Increase the size of the QR code on the screen and keep the phone camera level with it.
- Check that Authenticator is adding a Personal account when you are enrolling a personal Microsoft account.
- Use Microsoft’s manual code-entry option if the camera remains unable to read the image.
- Finish the test approval or code step before closing the browser window.
The verification code never arrives
- Check the destination carefully for a typing error and inspect spam or junk folders for email.
- For a phone, verify that the number can receive the type of message or call Microsoft offered.
- Wait for the current code rather than entering several older codes; one-time codes can expire.
- If you no longer control the destination, return to the security page and add a reachable replacement using another method.
The new method appears but cannot be used at work
Registration and permitted use are separate decisions in managed tenants. An administrator can allow a method for password reset while disallowing it for two-factor sign-in, or require Authenticator or a security key for every sign-in. Check the organization’s Security info instructions and policy instead of repeatedly registering the same method.
You cannot sign in with any existing method
Use Microsoft’s account-recovery or alternate-contact prompt when it is offered. If the screen says Help us secure your account, provide an email address or phone number you can access and complete its verification. If the account is managed by an employer or school, contact that organization’s help desk because tenant policy may control recovery.
Keep your verification list reliable
- Review the list periodically and remove numbers, email addresses and devices you no longer control.
- Keep at least two independent methods, such as Authenticator plus a passkey or a recovery email plus a physical key.
- Before changing a phone number, moving jobs or leaving school, add and verify a replacement.
- Store a physical security key somewhere secure but reachable when travelling or replacing a phone.
- Never approve an Authenticator request you did not initiate. Unexpected prompts can indicate that someone else is attempting to sign in.
- Remember the 10-method maximum when cleaning up old entries.
Which method should you add?
Choose a passkey or FIDO2 security key when phishing resistance is the priority and your devices or organization support it. Choose Authenticator when you want approval prompts, passwordless sign-in options or codes that can be generated without a network connection. Keep a recovery email or phone only when you can maintain access to it, and treat those code-based methods as recovery backups rather than your strongest protection.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →
