Xbox Two-Factor Authentication: Protect Your Xbox Account

Xbox uses your Microsoft account, so you turn on two-step verification at account.microsoft.com › Security. The Authenticator app makes Xbox sign-ins easy.

Turn it on

1. On a phone or computer, sign in at account.microsoft.com with the account you use on Xbox.
2. Open Security, then the advanced security options.
3. Turn on two-step verification and follow the steps.
4. Save the recovery code Microsoft shows.

Signing in on the console

After two-step verification is on, a new Xbox may show a code or a QR code. You can approve the sign-in in the Microsoft Authenticator app, scan the QR with your phone, or enter a code. Once signed in, you can set a passkey on the console so you do not need your password every time.

Protect the console too

The console passkey is separate from your Microsoft account password and only protects the profile on that console.

Older devices and apps

Some older apps that use your Microsoft account cannot show code screens. Microsoft lets you create app passwords for them in the security settings.

Code problems

• Codes by text: check the number on your account.
• Authenticator codes: set the phone clock to automatic.
• No method works: use the recovery code, or Microsoft account recovery.

Security codes by email or text are covered in Xbox security code.

Why Xbox accounts get targeted

Xbox accounts often hold saved payment details, Game Pass and valuable gamertags. A stolen password without two-step verification can lead to purchases or a lost gamertag.

More on Microsoft settings: Microsoft two-factor authentication.

Gamertag and recovery

Your gamertag belongs to the Microsoft account. If you lose access to that account, the gamertag, achievements and digital games go with it, so keep at least two recovery methods on the account: a phone number and an email, plus the Authenticator app.

Xbox app on PC

The Xbox app on Windows uses the same Microsoft account as Windows itself in many cases. Check which account is signed in before buying games.

FAQ

How do I turn on Xbox two-step verification?

At account.microsoft.com › Security, since Xbox uses your Microsoft account.

Is the Xbox passkey the same as two-step verification?

No, it is a PIN for the console profile.

Can I approve Xbox sign-ins on my phone?

Yes, with the Microsoft Authenticator app.

Related: Microsoft two-factor · Xbox security code · Xbox code not working.