Aka.ms GuideIndependent help for aka.ms links
Independent guide - not affiliated with or endorsed by Microsoft. Genuine aka.ms links only forward to Microsoft.

aka.ms/mysecurityinfo explained

Updated

aka.ms/mysecurityinfo is a Microsoft short link that opens the Security info page of My Sign-Ins, where a work or school account holder adds, changes or removes the methods used to prove who they are.

Where the link goes

When we checked in October 2026, aka.ms/mysecurityinfo forwarded to mysignins.microsoft.com/security-info. That is the Security info page in Microsoft's My Sign-Ins portal, the same destination as aka.ms/mfasetup. Microsoft can change where a short link points, so always read the address bar after the page loads: it should be a Microsoft-owned address such as mysignins.microsoft.com, not a look-alike.

The page is built for work or school accounts — the account your employer, school or university gives you for Microsoft 365, Teams or Outlook. If you only have a personal Microsoft account (Outlook.com, Xbox, Minecraft), your security options live in the security section of your Microsoft account at account.microsoft.com instead.

What "security info" means

Security info is the list of methods your account can use to confirm it is really you. Microsoft uses it for two jobs: two-step verification when you sign in, and identity checks when you reset a forgotten password. According to Microsoft's documentation, not every method can do both jobs:

MethodWhat Microsoft says it can be used for
Authenticator appTwo-step verification and password reset
Phone (text message or call)Two-step verification and password reset
Security keyTwo-step verification and password reset
Email addressPassword reset only
Security questionsPassword reset only

Which of these you actually see depends on your organization. Your IT administrator decides which methods are allowed and how many you must register, so two people at different companies can see different options on the same page.

How to add or update a method

  1. Open aka.ms/mysecurityinfo yourself in a browser — type it rather than tapping a link someone sent you.
  2. Sign in with your work or school account on the Microsoft page that opens. You may be asked to verify with a method you already have.
  3. Select Add sign-in method and choose from the list your organization allows.
  4. Follow the prompts. For the Authenticator app, you scan a QR code shown on your computer with the app; for a phone, Microsoft sends a test text or call that you confirm.
  5. Check your default method if the page offers the option, and keep at least one backup.

Setting up the app for the first time? Our guide to aka.ms/authapp covers installing Microsoft Authenticator.

Changing or removing a method

The same page lists every method you have already registered. From there you can change a phone number, delete a method you no longer use, or switch which method is used by default when you sign in, if your organization allows it. Microsoft may ask you to verify with an existing method before it accepts a change, which is a normal security step. If a method is greyed out or missing, your administrator has probably restricted it — ask your IT team rather than looking for a workaround.

The "Keep your account secure" wizard

Sometimes you do not open the page yourself. Right after signing in to a work or school account, Microsoft can show a More information required prompt followed by a Keep your account secure wizard. This appears when your organization requires security info that you have not registered yet. Microsoft describes it as a guided version of the same page: in its example, you set up the Authenticator app first and then a phone for text messages or calls. If your organization requires app passwords, an extra section may appear that has to be completed before the wizard finishes.

Good habits for security info

  • Register more than one method. Microsoft strongly recommends it, so a lost or replaced phone does not lock you out.
  • Update it before you change phones. Add the new phone, or move the Authenticator account, while you still have the old device.
  • Remove methods you no longer control, such as an old number or a device you sold or gave away.
  • Review it after a suspicious sign-in. If you see activity you do not recognize, change your password and check that every listed method is yours.

If you are locked out

If you can no longer sign in because your only method is gone, this page cannot help on its own, because it needs you to sign in first. For a work or school account, the people who can reset your methods are your organization's IT help desk or administrators. Use the contact details your organization has published internally — not a number or website found through a search result or an unexpected message.

Nobody legitimate will ask you to read out a verification code, approve a sign-in prompt you did not start, or install remote-access software so they can "fix" your security info. If someone contacts you asking for this, stop and report it to your IT team. More on spotting fakes in Is aka.ms safe?

Other Microsoft short links, and where each one goes, are listed in our aka.ms links directory.

Sources

Frequently asked questions

Is aka.ms/mysecurityinfo legitimate?

Yes. It is a Microsoft short link that forwards to the Security info page on mysignins.microsoft.com. Check the address bar after it loads, and only sign in on that Microsoft page.

What is the difference between aka.ms/mysecurityinfo and aka.ms/mfasetup?

When we checked in October 2026, both forwarded to the same Security info page. Microsoft uses different short names in different messages, but they lead to the same place.

Can I use aka.ms/mysecurityinfo with a personal Microsoft account?

The page is designed for work or school accounts. Personal Microsoft accounts manage their security options in the security section of the Microsoft account site.

I lost my phone and cannot sign in. What now?

Contact your organization's IT help desk or administrator through your usual internal channels. They can reset your registered methods so you can set them up again.