Security & Identity

Spot phishing, set up MFA, reset passwords, and know what to do if something looks wrong with your account.

64 guides in this category.

Phishing, Scams & Compromised Accounts

• How to Check If Your Email Was Compromised - Suspect your email is compromised? Learn how to investigate security alerts, check sign-in activity, and secure your Microsoft 365 account.
• How to Identify a Phishing Email - Spot email scams before clicking. Learn the five common red flags of phishing emails and how to report suspicious messages in Outlook.
• How to Recognize and Avoid Tech Support Scams - Identify and avoid tech support scams. Learn to recognize fake system warnings, suspicious pop-ups, and phishing cold calls.
• How to Recognize and Report Suspicious Microsoft Teams Messages - Spot phishing, scam, and impersonation messages in Microsoft Teams and report them before they cause damage.
• How to Recognize Modern Scams - Spot the scams your spam filter won't catch — QR code phishing, fake text messages, and AI-generated calls. Real examples and what to do.
• How to Spot Deepfake Audio and Video Scams - If your CEO calls asking for an urgent wire transfer, how do you know it is really them? Learn how to detect AI deepfake scams.
• How to Spot Fake Microsoft Login Pages - Attackers frequently create fake Microsoft login pages that look identical to the real sign-in screen to steal your credentials.
• How to Stop Fake Virus Pop-ups and Spam Notifications from Your Browser - Fake virus alerts that appear even when your browser is closed come from a site you allowed to send notifications. Here is how to revoke it in Edge and Chrome.
• How to Stop Unwanted MFA Prompts (Push Bombing and MFA Fatigue) - Understand MFA fatigue attacks (push bombing) and learn what to do if you receive repeated, unexpected multi-factor authentication requests on your phone.
• How to Verify a Suspicious Call or Message from IT - Someone claiming to be your help desk wants an MFA code or remote access. Here is how to confirm who is really on the line before you give them anything.
• Understanding Fake BSOD Scams - Spot a fake Windows Blue Screen of Death (BSOD) used by scammers to trick you into calling fake technical support numbers.
• Understanding Microsoft 365 Account Security - Your Microsoft 365 account is protected by multiple layers of security
• Understanding the Macs Don't Get Viruses Myth - Macs are not immune, and the belief was once reasonable. Here is what macOS genuinely protects you from, and what actually reaches Mac users at work.
• Understanding What to Do If Your Account Is Hacked - Step-by-step guide for employees who suspect their Microsoft 365 account was hacked — what to do in the first 15 minutes, what to check, and when to call IT.
• What to Do If You Clicked a Phishing Link - You clicked a link in a phishing email. Here is what to do in the first five minutes, ordered by urgency, and how to judge how serious it actually is.
• What to Do If You See a Ransomware Message - Contain a ransomware attack in the first five minutes: disconnect the computer, do not pay, call IT, and tell real encryption from a scare page.
• What to Do When a Coworker's Account Sends a Strange Email - Handle a strange email from a coworker''s real account: verify by voice, never by reply, report it fast, and warn others without forwarding it.

MFA & Authenticator

• How to Configure Email and Work Apps on a New Phone - Step-by-step guide to registering Microsoft Authenticator MFA and setting up Outlook work email on a new iPhone or Android phone without calling IT.
• How to Enable Two-Step Verification on Personal Accounts - Secure your personal accounts. Enable two-step verification (MFA) for Microsoft, Google, and Apple profiles using authenticator apps.
• How to Fix Apple Mail Not Connecting After Enabling MFA - Is your Mac constantly asking for your email password after your company turned on Two-Factor Authentication? Here is how to fix the connection.
• How to Fix Microsoft or Google Authenticator Not Working - Why your authenticator app is rejecting codes, not sending push notifications, or acting broken, and how to fix it.
• How to Fix "You Can't Access This From Here" Conditional Access Errors - Fix Microsoft 365 "You can't access this from here" errors caused by Conditional Access policies, unapproved devices, or missing VPN connections.
• How to Fix "Your Account Has Been Locked" - Fix sign-in blocks from MFA failures, Conditional Access policies, or security alerts in Microsoft 365.
• How to Recover Microsoft Authenticator After Losing Your Phone - Lost or broke your phone? Learn how to sign in to Microsoft 365 without the Authenticator app and set up a new phone.
• How to Run a Personal Security Checkup in 15 Minutes - A seven-step checkup for your work account — sign-in methods, login history, mailbox rules, connected apps, saved passwords, recovery details, device lock.
• How to Set Up and Use Passkeys on Your Phone and Browser - Use your iPhone, Android, or web browser to save and manage passkeys for passwordless sign-in across different websites.
• How to Transfer MFA to a New Phone (Microsoft 365) - When you get a new phone, the Microsoft Authenticator app does not transfer automatically.
• How to Understand MFA and Prevent Account Lockouts - Multi-factor authentication (MFA) protects your account, but it can also lock you out if your only verification method becomes unavailable.
• How to Use Passkeys Instead of Passwords in Microsoft 365 - Set up and use passkeys to sign in to Microsoft 365 without typing a password, using Windows Hello, Face ID, or your phone.
• How to Use the Microsoft Authenticator App - The Microsoft Authenticator app is used to approve multi-factor authentication (MFA) prompts and can enable passwordless sign-in for your Microsoft 365 account.
• Understanding Passkeys: What They Are and How They Work - A passkey replaces your password with a key stored on your phone or PC. What it is, how signing in works, and why Microsoft, Google and Apple switched.

Passwords & Sign-In

• How to Change Your Microsoft 365 Password from Your Phone - Change or reset your Microsoft 365 work password from your iPhone or Android — no computer needed.
• How to Change Your Microsoft 365 Password - Change your Microsoft 365 password from the web portal. Follow these quick steps to update your credentials and secure your account.
• How to Change Your Windows Password on a Domain-Joined Computer - Update your Windows login password on a domain-joined work computer. Follow these steps to change expiring Active Directory credentials.
• How to Check Your Sign-In Activity in Microsoft 365 - Monitor your Microsoft 365 sign-in history. Learn how to check login locations and devices to detect and report unauthorized access.
• How to Create and Use Strong Passwords — A Practical Guide - Create strong, memorable passwords using passphrases, avoid common mistakes, and use password managers to protect your accounts.
• How to Reset Your Microsoft 365 Password When You Are Locked Out - Locked out of Microsoft 365? Reset your password with SSPR, recover access on a domain-joined PC, and get back to work without calling IT.
• How to Set Up a Picture Password on Windows - A picture password lets you sign in to Windows by drawing gestures (taps, lines, and circles) on a photo of your choice.
• How to Set Up a Windows Hello PIN - A Windows Hello PIN lets you sign in to your computer with a short numeric code instead of typing your full password.
• How to Set Up and Use a Password Manager at Work - Set up a password manager for work — choose between browser-based and standalone options, import existing passwords, and build a secure daily workflow.
• How to Set Up Self-Service Password Reset (SSPR) - Register your authentication methods for Self-Service Password Reset (SSPR) so you can reset a forgotten password on your own - without calling the helpdesk.
• How to Set Up Windows Hello Facial Recognition - Windows Hello facial recognition lets you unlock your computer by looking at the screen.
• How to Set Up Windows Hello Fingerprint - Set up Windows Hello on a laptop with a fingerprint reader so you sign in with a finger tap instead of typing your password every time.
• How to Unlock Your Account After Too Many Failed Sign-In Attempts - Fix a locked Microsoft 365 or Windows account after too many wrong passwords. Step-by-step self-service recovery.
• Understanding Password Resets - Why your work password sometimes covers everything and sometimes does not, and where to change it so Windows, Outlook, and Teams all agree.
• Understanding Windows Sign-In Methods - Windows offers several ways to sign in - password, PIN, fingerprint, facial recognition, picture password, and security keys.

AI at Work: Privacy & Safety

• How to Use ChatGPT, Gemini, and Other AI Tools Responsibly at Work - Practical tips for using AI assistants at work without risking company data or breaking policy.
• Understanding AI-Generated Content at Work - Spot AI hallucinations, understand the limitations of tools like Copilot and ChatGPT, and use AI safely at work.
• Understanding Shadow AI: Why Your Company Cares What Tools You Use - What shadow AI is, why it's a security risk, and how to stay on the right side of your company's policy.
• Understanding What Copilot Can See — Privacy and Data Access - What data Microsoft Copilot can access, what it can't see, and how your organization's permissions protect your information.
• Understanding Which AI Tools Are Safe to Use at Work - Learn which AI tools are safe for work tasks and what data you should never paste into them.

Devices, Policies & Safe Connections

• How to Fix "Device Not Compliant" Errors on Your Phone - Why you can't check work email on your phone and how to fix compliance errors in Intune Company Portal or Workspace ONE.
• How to Fix "Trust Center" and Macro Security Warnings in Office - Why Microsoft Office displays yellow security warnings at the top of your documents and how to safely enable content or macros.
• How to Fix "Your Organization's Policies Are Preventing Us" Error - Why you receive the 'Your organization's policies are preventing us' error in Microsoft Office and how to request access or bypass it.
• How to Prepare Your Computer Before Returning It to IT - Leaving the company or getting a laptop upgrade? Learn how to back up your files and securely sign out before handing it over.
• How to Secure Your Personal Phone for Work - Can IT see my photos? Learn how to separate your work data from personal data when using your own phone for the office.
• How to Stay Safe on Public Wi-Fi and Untrusted Networks - Protect your work data on public Wi-Fi — hotel, airport, and coffee shop networks. Practical steps, no admin rights needed.
• How to Tell if Your Microsoft 365 Account is Signed In Correctly - A quick guide to verifying which account is actively signed into your Office apps, preventing sync errors and missing licenses.
• Understanding Company Portal, Device Management, and Your Privacy - What happens when your organization manages your device through Microsoft Intune and the Company Portal app.
• Understanding IT Policies: Why You Can't Download That App - Why does IT block you from downloading useful tools? Learn the real reasons behind software restrictions and Administrator Rights.
• Understanding the Difference Between a VPN and Zero-Trust Access - A simple explanation of how traditional VPNs compare to modern Zero-Trust Network Access (ZTNA) and why companies are switching.
• Understanding What IT Can See on Your Work Computer - An honest account of what your employer can see on a work computer — email, files, browsing, and audit logs — and what is actually done in practice.
• Understanding Your Company's VPN - What a VPN is, why your company requires it, and how it protects your data when working remotely.
• What to Do If You Lose Your Work Laptop or Phone - Left your laptop in an Uber? Don't panic. Learn the exact steps to lock or wipe your device to protect company data.