What’s your most valuable online account, the one most deserving of protection? If you use a Microsoft account to sign in to a Windows PC, that account and its associated email address should be the one you guard most jealously. That’s especially true if you use that Microsoft account for OneDrive storage and Office 365 documents.

In this post, I list seven steps you can take to help you lock that account down so it’s safe from online attacks. As always, there’s a balancing act between convenience and security, so I’ve divided the steps into three groups, based on how tightly you want to lock down your Microsoft account. (It’s worth noting that this article is about consumer Microsoft accounts used with Home and Personal editions of Office 365, Microsoft 365, and OneDrive. Security settings for business and enterprise Microsoft 365 accounts are managed by domain administrators through Azure Active Directory, using a completely different set of tools.) 

Baseline security

This level is sufficient for most ordinary PC users, especially those who don’t use their Microsoft email address as a primary factor for signing in to other sites. If you’re helping a friend or relative who’s technically unsophisticated and intimidated by passwords, this is a good option.

At a minimum, you should create a strong password for your Microsoft account, one that’s not used by any other account.

Read more at How to lock down your Microsoft account and keep it safe from outside attackers