2fa already activated?

Question

Hello,

I'm trying to activate the 2FA, but when i give the number it says "This is already part of your security info". And it's actually true, i used the same number in the section security>update your security infos where it says "When you need to prove you're you or a change is made to your account, we'll use your security info to contact you."

If i remember correctly it asks me for the sms code when i change position or when i make changes to my infos, it doesn't ask me for it every time i login (i don't have trusted devices, but maybe it recognizes the last location so it doesn't asks).

Is this the SAME as 2fa?

Answer 1

Hello XP Mai,

That partially answer to my question, i understand that even if i don't have trusted devices listed 2fa will not be triggered because of cookies or because i'm using a device that i recently used to login, and i'm ok with this.

My concern is:

I'm trying to activate the 2fa through Security>More security options>Set up two-step verification

When i put there my phone number, it says "This is already part of your security info." And it's actually true, i used the same number in the section security>update your security infos where it says "When you need to prove you're you or a change is made to your account, we'll use your security info to contact you." the my number it's listed there and under it says "will receive alerts"

So does it means that 2FA it's already active? or the thing i use my number for in security settings it's a different option?

Answer 2

No i was not referring to the app, just said that i used my number in security info and so wasn't able to use it in Security>More security options>Set up two-step verification.

So since the number is there, is this 2fa?

Another question, i used an email-client to make a sync, why i didn't received the sms? i just had to put the password in the client and it synchronized.

It's because i used the same device/ip i used recently?

If i had attempted a synchronization from another location/device, would it have sent the sms to me after putting the right password?

I'm asking this because i received some unsuccessful sync.attempt not by me, but i didn't received any sms, so my guess is that they didn't guessed the password, so the sms verification didn't triggered, it's correct?

Answer 3

Post to up.

Answer 4

post to up the question.

Answer 5

Hello Argantu,

I understand that you are having concerns about your 2-step verification functionality as it does not work as what you expect since it does not prompt you for a security code on every log in attempt.

I am pleased to inform you that two-step verification (2-FA) is not restricted to just using the Authenticator app to generate a temporary security code, but also security codes from any where else—SMS, offline backup codes, etc.

2-FA means two forms of identity: password and security info. You cannot just log in with password without a security code.

Learn more about 2-FA here » https://support.microsoft.com/en-us/help/12408/microsoft-account-how-to-use-two-step-verification

You may not have any trusted devices, but you might have ticked this while logging in.

You can immediately trigger a 2-FA prompt if you delete Microsoft/Outlook.com cookies, open in private mode or use a different browser.

I hope my answer is helpful to you. :)

Cheers!

— XP

References:

• selectively delete browser cookies: https://www.beacontechnologies.com/blog/2012/10/clearing-cookies-from-just-one-site/
• open in private mode: https://www.howtogeek.com/269265/how-to-enable-private-browsing-on-any-web-browser/