Security & Identity

Spot phishing, set up MFA, reset passwords, and know what to do if something looks wrong with your account.

64 guides in this category.

---

How-To Guides

• How to Change Your Microsoft 365 Password from Your Phone — Change or reset your Microsoft 365 work password from your iPhone or Android — no computer needed.
• How to Change Your Microsoft 365 Password — Change your Microsoft 365 password from the web portal. Follow these quick steps to update your credentials and secure your account.
• How to Change Your Windows Password on a Domain-Joined Computer — Update your Windows login password on a domain-joined work computer. Follow these steps to change expiring Active Directory credentials.
• How to Check If Your Email Was Compromised — Suspect your email is compromised? Learn how to investigate security alerts, check sign-in activity, and secure your Microsoft 365 account.
• How to Check Your Sign-In Activity in Microsoft 365 — Monitor your Microsoft 365 sign-in history. Learn how to check login locations and devices to detect and report unauthorized access.
• How to Configure Email and Work Apps on a New Phone — Step-by-step guide to transferring Microsoft Authenticator MFA and setting up Outlook work email on a new iPhone or Android phone without calling IT.
• How to Create and Use Strong Passwords — A Practical Guide — Learn how to create strong, memorable passwords using passphrases, avoid common mistakes, and use password managers to protect your accounts.
• How to Enable Two-Step Verification on Personal Accounts — Secure your personal accounts. Enable two-step verification (MFA) for Microsoft, Google, and Apple profiles using authenticator apps.
• How to Fix Apple Mail Not Connecting After Enabling MFA — Is your Mac constantly asking for your email password after your company turned on Two-Factor Authentication? Here is how to fix the connection.
• How to Fix 'Device Not Compliant' Errors on Your Phone — Why you can't check work email on your phone and how to fix compliance errors in Intune Company Portal or Workspace ONE.
• How to Fix Microsoft or Google Authenticator Not Working — Why your authenticator app is rejecting codes, not sending push notifications, or acting broken, and how to fix it.
• How to Fix "Trust Center" and Macro Security Warnings in Office — Learn why Microsoft Office displays yellow security warnings at the top of your documents and how to safely enable content or macros.
• How to Fix Windows 11 Update Failures — Windows Updates are crucial for security, but they sometimes get stuck or fail to install.
• How to Fix "You Can't Access This From Here" Conditional Access Errors — Fix Microsoft 365 "You can't access this from here" errors caused by Conditional Access policies, unapproved devices, or missing VPN connections.
• How to Fix "Your Account Has Been Locked" — MFA and Conditional Access Blocks — Fix sign-in blocks from MFA failures, Conditional Access policies, or security alerts in Microsoft 365.
• How to Fix "Your Organization's Policies Are Preventing Us" Error — Learn why you receive the 'Your organization's policies are preventing us' error in Microsoft Office and how to request access or bypass it.
• How to Prepare Your Computer Before Returning It to IT — Leaving the company or getting a laptop upgrade? Learn how to back up your files and securely sign out before handing it over.
• How to Recognize and Avoid Tech Support Scams — Identify and avoid tech support scams. Learn to recognize fake system warnings, suspicious pop-ups, and phishing cold calls.
• How to Recognize Modern Scams — QR Codes, Fake Texts, and AI-Generated Tricks — Spot the scams your spam filter won't catch — QR code phishing, fake text messages, and AI-generated calls. Real examples and what to do.
• How to Recover Microsoft Authenticator After Losing Your Phone — Lost or broke your phone? Learn how to sign in to Microsoft 365 without the Authenticator app and set up a new phone.
• How to Reset Your Microsoft 365 Password When You Are Locked Out — Locked out of Microsoft 365? Reset your password with SSPR, recover access on a domain-joined PC, and get back to work without calling IT.
• How to Run a Personal Security Checkup in 15 Minutes — A seven-step checkup for your work account — sign-in methods, login history, mailbox rules, connected apps, saved passwords, recovery details, device lock.
• How to Secure Your Personal Phone for Work — Can IT see my photos? Learn how to separate your work data from personal data when using your own phone for the office.
• How to Set Up a Picture Password on Windows — A picture password lets you sign in to Windows by drawing gestures (taps, lines, and circles) on a photo of your choice.
• How to Set Up a Windows Hello PIN — A Windows Hello PIN lets you sign in to your computer with a short numeric code instead of typing your full password.
• How to Set Up and Use a Password Manager at Work — Set up a password manager for work — choose between browser-based and standalone options, import existing passwords, and build a secure daily workflow.
• How to Set Up Self-Service Password Reset (SSPR) — Register your authentication methods for Self-Service Password Reset (SSPR) so you can reset a forgotten password on your own - without calling the helpdesk.
• How to Set Up Windows Hello Facial Recognition — Windows Hello facial recognition lets you unlock your computer by looking at the screen.
• How to Set Up Windows Hello Fingerprint — If your computer has a built-in fingerprint reader (or a USB fingerprint reader), you can use Windows Hello to sign in with a quick finger tap instead of...
• How to Spot Deepfake Audio and Video Scams — If your CEO calls asking for an urgent wire transfer, how do you know it is really them? Learn how to detect AI deepfake scams.
• How to Spot Fake Microsoft Login Pages — Attackers frequently create fake Microsoft login pages that look identical to the real sign-in screen to steal your credentials.
• How to Stay Safe on Public Wi-Fi and Untrusted Networks — Learn how to protect your work data on public Wi-Fi — hotel, airport, and coffee shop networks. Practical steps, no admin rights needed.
• How to Stop Fake Virus Pop-ups and Spam Notifications from Your Browser — Fake virus alerts that appear even when your browser is closed come from a site you allowed to send notifications. Here is how to revoke it in Edge and Chrome.
• How to Stop Unwanted MFA Prompts (Push Bombing and MFA Fatigue) — Understand MFA fatigue attacks (push bombing) and learn what to do if you receive repeated, unexpected multi-factor authentication requests on your phone.
• How to Tell if Your Microsoft 365 Account is Signed In Correctly — A quick guide to verifying which account is actively signed into your Office apps, preventing sync errors and missing licenses.
• How to Transfer MFA to a New Phone (Microsoft 365) — When you get a new phone, the Microsoft Authenticator app does not transfer automatically.
• How to Understand MFA and Prevent Account Lockouts — Multi-factor authentication (MFA) protects your account, but it can also lock you out if your only verification method becomes unavailable.
• How to Unlock Your Account After Too Many Failed Sign-In Attempts — Fix a locked Microsoft 365 or Windows account after too many wrong passwords. Step-by-step self-service recovery.
• How to Use ChatGPT, Gemini, and Other AI Tools Responsibly at Work — Practical tips for using AI assistants at work without risking company data or breaking policy.
• How to Use Passkeys Instead of Passwords in Microsoft 365 — Learn how to set up and use passkeys to sign in to Microsoft 365 without typing a password, using Windows Hello, Face ID, or your phone.
• How to Use the Microsoft Authenticator App — The Microsoft Authenticator app is used to approve multi-factor authentication (MFA) prompts and can enable passwordless sign-in for your Microsoft 365 account.
• How to Verify a Suspicious Call or Message from IT — Someone claiming to be your help desk wants an MFA code or remote access. Here is how to confirm who is really on the line before you give them anything.

Explainers

• Understanding AI-Generated Content at Work — What You Can and Can't Trust — Learn how to spot AI hallucinations, understand the limitations of tools like Copilot and ChatGPT, and use AI safely at work.
• Understanding Company Portal, Device Management, and Your Privacy — What happens when your organization manages your device through Microsoft Intune and the Company Portal app.
• Understanding Data Privacy Basics (GDPR/CCPA) for Freelancers — A plain-English summary of what GDPR and CCPA mean for solo businesses and freelancers who collect client data on their websites.
• Understanding Fake BSOD Scams — How to Tell a Real Blue Screen from a Fake One — Learn how to spot a fake Windows Blue Screen of Death (BSOD) used by scammers to trick you into calling fake technical support numbers.
• Understanding IT Policies: Why You Can't Download That App — Why does IT block you from downloading useful tools? Learn the real reasons behind software restrictions and Administrator Rights.
• Understanding Multi-Factor Authentication (MFA) for Small Business — A plain-English explanation of what MFA is, why your small business needs it, and how to implement it without frustrating your employees.
• Understanding Microsoft 365 Account Security — What Protects You and Why — Your Microsoft 365 account is protected by multiple layers of security
• Understanding Passkeys — What They Are and Why They're Replacing Passwords — Learn what passkeys are, how they work behind the scenes, and why major websites are replacing traditional passwords with them.
• Understanding Password Resets — Active Directory vs. Microsoft 365 — Why your work password sometimes covers everything and sometimes does not, and where to change it so Windows, Outlook, and Teams all agree.
• Understanding Shadow AI: Why Your Company Cares What Tools You Use — What shadow AI is, why it's a security risk, and how to stay on the right side of your company's policy.
• Understanding the Best Password Manager for a Small Business — Compare 1Password, Bitwarden, and Dashlane to find the best secure password manager for your small business team.
• Understanding the Difference Between a VPN and Zero-Trust Access — A simple explanation of how traditional VPNs compare to modern Zero-Trust Network Access (ZTNA) and why companies are switching.
• Understanding the Macs Don't Get Viruses Myth — Macs are not immune, and the belief was once reasonable. Here is what macOS genuinely protects you from, and what actually reaches Mac users at work.
• Understanding What Copilot Can See — Privacy and Data Access — Learn what data Microsoft Copilot can access, what it can't see, and how your organization's permissions protect your information.
• Understanding What IT Can See on Your Work Computer — An honest account of what your employer can see on a work computer — email, files, browsing, and audit logs — and what is actually done in practice.
• Understanding What to Do When You Suspect Your Account Has Been Hacked — An Employee Incident Response Guide — Step-by-step guide for employees who suspect their Microsoft 365 account was hacked — what to do in the first 15 minutes, what to check, and when to call IT.
• Understanding Which AI Tools Are Safe to Use at Work — Learn which AI tools are safe for work tasks and what data you should never paste into them.
• Understanding Windows Sign-In Methods — Passwords, PINs, and Biometrics — Windows offers several ways to sign in - password, PIN, fingerprint, facial recognition, picture password, and security keys.
• Understanding Windows Updates — What They Are and Why They Matter — What Windows Updates are, why they are important, the different types of updates you will encounter, and what to expect when your computer needs to restart...
• Understanding Your Company's VPN — What It Does and Why You Need It — Learn what a VPN is, why your company requires it, and how it protects your data when working remotely.

Other

• What to Do If You Clicked a Phishing Link — You clicked a link in a phishing email. Here is what to do in the first five minutes, ordered by urgency, and how to judge how serious it actually is.
• What to Do If You Lose Your Work Laptop or Phone — Left your laptop in an Uber? Don't panic. Learn the exact steps to lock or wipe your device to protect company data.