Phishing (pronounced: fishing) is an attack that attempts to steal your money, or your identity, by getting you to reveal personal information -- such as credit card numbers, bank information, or passwords -- on websites that pretend to be legitimate. Cybercriminals typically pretend to be reputable companies, friends, or acquaintances in a fake message, which contains a link to a phishing ...

Find everything you need to manage your Microsoft account, Xbox profile, and more.

Microsoft prioritizes account security and works to prevent people from signing in without your permission. When we notice a sign-in attempt from a new location or device, we help protect the account by sending you an email message and an SMS alert. If your phone number or email changes, it's important to promptly update the security contact info on the Security basics page so we can work with ...

Learn how to add security information to protect your Microsoft account.

Using Authenticator as a way to sign in If you have turned on passwordless, two-step, or multi-factor authentication for your account, use the following steps to sign-in: Go to the site where you want to sign in. Enter your username at the sign-in prompt and select Next. Select Send notification.

What does "Let's keep your account secure" mean? If you see a message like the one below that says, "Let’s keep your account secure" when signing in to your work or school account, it's because your organization or Microsoft needs another way to verify your identity during sign-in. Why do I need to set up another way to verify it's me? Another sign-in method helps increase the security on ...

The Microsoft Authenticator app helps you sign into your accounts when you're using two-step verification.

Microsoft Defender's web protection helps protect you against malicious sites that are being used for phishing or spreading malware. Available on Windows, Android, and iOS.

Microsoft Support is here to help you with Microsoft products. Find how-to articles, videos, and training for Microsoft Copilot, Microsoft 365, Windows 11, Surface, and more.

A phishing email is an email that appears legitimate but is actually an attempt to get your personal information or steal your money. Some deceptive emails appear to be from a safe sender but, in fact, have a "spoofed" source address to fool you. Here are some ways to deal with phishing and spoofing scams in Outlook.com. Spoof intelligence in Exchange Online Protection helps prevent phishing ...