How do I lock-down my Microsoft account such that a password is required to login?
I logged-into my Microsoft Live account for the first time in some years, and I was horrified by the login workflow:
- First it asked me for my username. I entered it
- Then it sent me an email and asked me to enter the OTP it sent (some short string of numbers). I entered it
- Then I was logged-in!
At no point did it ask me for my password!
I went to my security settings. Under
Ways to prove who you are it has two rows:
- Enter password
- Enter code
It wasn't clear if the two methods were a logical AND or OR, but--from my prior experience--it appears to be a logical OR. I couldn't find a way to switch it to a logical AND. And I couldn't find a way to remove the email OTP as an auth method.
How can I secure my Microsoft account such that auth will fail unless the correct password is entered during login?
Note: This question has nothing to do with Microsoft Windows