If you have followed the top five security steps including adding security proofs to your Microsoft account then follow these additional security steps to make sure your Microsoft account and computer are as secure as possible.
For your Microsoft account
For your Computer
For your Console
Use different usernames and passwords to different online sites, especially important sites which hold financial or personal information. If you use the same username and password everywhere, and it's stolen, you could lose access to all of your accounts.
If you are checking your Hotmail account, signing into Xbox.com or using another service which requires you to use your Microsoft account on a public computer such as an Internet café, take caution in that these PCs may not offer the same protection as you do at home.
We recommend that if you are looking to use a public PC that you use a single use code instead of your password when signing in with your Microsoft account.
Find out more about how to set this up here.
An alternative is to use the IE 9 "In private browsing" feature. This enables you to surf the web without leaving a trail in Internet Explorer. Press Ctrl+Shift+P, or select "In private browsing" from the New Tab page to activate and a new browser window will pop open. One you have finished browsing, close the browser window and there will be no trail of your activities.
If this is not available to you and you do have to use your regular Microsoft account password, remember to sign out and close any browsers.
Share your Microsoft account email address only with people you know and trust. Treat your personal information online the same way you would offline - follow the same rules as you do in the real world as you do online.
Xbox LIVE offers a wide variety of online safety and privacy settings so that you can control your Xbox LIVE experience. The default online safety and privacy settings are divided into three age groups: child, teen, and adult. Xbox LIVE determines which default safety and privacy settings to use based on the birthdate that was entered when the Xbox LIVE account was created.
You can, however, customize the online safety and privacy settings to whatever is best for you and your family. Adults can change the default settings on their own account as well as on family member accounts.
Learn how to enable and find out what you can control.
For Xbox 360
For Xbox One
Is the website an official Microsoft site? Beware of websites which ask for your Microsoft account details, especially sites which offer deals that are too good to be true, such as free Microsoft Points. Before entering your Microsoft account details check the address bar in your browser to make sure it's the correct address and looks like below.
If you see a link in a suspicious email message, don't click on it. You can generally spot suspicious emails by:
Instead, type out the address in your web browser to see if you are going to the actual company's web site.
If you have more than one Xbox 360 console or you want to play games at a friend's house, you can download your Xbox LIVE profile or gamertag to multiple consoles. For security purposes, we recommend you password protect your Xbox LIVE profile. If you don’t, anyone who has access to the console with your profile on it has the ability to purchase content.
As with using a browser on your computer, use the same caution using Internet Explorer on your console. Be aware of websites which ask for your Microsoft account details, especially sites which offer deals that are too good to be true, such as free Microsoft Points. Before entering your account details check the address bar in your browser to make sure it's the correct address.
To view the address bar in Internet Explorer on your Xbox 360, press ‘B’ on your controller.
If you share your Xbox 360 console with people in your house, you can improve the security on your Microsoft account by disabling the Microsoft Account associated with your gamertag from being displayed in the dash. To do this
Setting an Xbox LIVE passcode or passkey adds an additional layer of security on your account. If you set an Xbox LIVE passcode or passkey for your profile, anyone who wants to use that profile on your console must enter the passcode or passkey before signing in to Xbox LIVE.
For Xbox 360, click here to find out how to set it.
For Xbox One, click here to find about passkeys
There are many apps on social networks sites and cell phones which can integrate with Xbox LIVE. The majority of these require you to enter your Microsoft account username and password. As we cannot determine what information these apps are sharing we encourage you to take caution. For example, check to see if there are reviews from other users or friends to see if they have reported any issues.