jekyll build of commit 9298bf9

Author: sourcejedi

2026/03/30/online-security/1-email.html

@@ -70,7 +70,6 @@ <h1 class="post-title">Security part 1 - Email sign-in</h1>
     </ul>
   </li>
   <li><a href="#next-steps" id="markdown-toc-next-steps">Next steps</a></li>
-  <li><a href="#footnotes" id="markdown-toc-footnotes">Footnotes</a></li>
 </ul>
 
 <h2 id="sign-in-to-your-email">Sign in to your email</h2>
@@ -183,7 +182,7 @@ <h3 id="option-1-two-step-verification">Option 1: Two-step verification</h3>
   <li>Outlook.com  /  Microsoft account</li>
 </ol>
 
-<p>These accounts rely heavily on your mobile number.  They might also make use of an already signed-in device.</p>
+<p>These accounts rely heavily on a mobile phone.  They might also make use of an already signed-in device.</p>
 
 <p>Let’s make a recovery plan, for when your phone is lost or broken.</p>
 
@@ -225,66 +224,59 @@ <h4 id="2-gmail--google-account">2. Gmail / Google account</h4>
 
 <h4 id="3-outlookcom--microsoft-account">3. Outlook.com / Microsoft account</h4>
 
-<p>When you open your detailed security settings, the Microsoft account requires you to receive security codes.<sup id="fnref:msa-contact-forced"><a href="#fn:msa-contact-forced" class="footnote" rel="footnote" role="doc-noteref">1</a></sup></p>
+<p>In order to turn on two-step verification, Microsoft requires an alternative contact method.</p>
 
-<p>Microsoft say that “for increased security, you can no longer add a phone number.”<sup id="fnref:msa-no-phone"><a href="#fn:msa-no-phone" class="footnote" rel="footnote" role="doc-noteref">2</a></sup>  In general: “we will start phasing out SMS as a method of authentication and account recovery for personal Microsoft accounts.”<sup id="fnref:msa-sms-phaseout"><a href="#fn:msa-sms-phaseout" class="footnote" rel="footnote" role="doc-noteref">3</a></sup></p>
+<p>Contact info is also required to use various basic security features.</p>
 
-<p>To manage security settings for an Outlook.com email address, you can add a separate email address.</p>
+<p>As of 2026, Microsoft tell you to add a “verified email”, which is separate from your Outlook.com account.  They are phasing out the use of phone numbers.</p>
 
-<p>Microsoft do not offer any other options.  They have not announced any plans about the required security codes.  I have found it very hard to provide guidance for Microsoft.  In an ideal world, Microsoft would already provide guidance that everyone can follow.</p>
+<p>Microsoft have already removed the official method to update your phone number.  For the moment, you may be able to use your current mobile number, as one of your backup methods.</p>
 
-<p>Many people already use a free Google account (above).  If necessary, you can create a <code class="language-plaintext highlighter-rouge">gmail.com</code> email address for an existing account.</p>
-
-<p>iPhone users should already have an Apple account (above).  You can add an <code class="language-plaintext highlighter-rouge">icloud.com</code> email address to your existing account.</p>
-
-<p>To manage your Microsoft account security settings, including linking a separate email address:</p>
-
-<ol>
-  <li>
-    <p>Open your web browser.</p>
-  </li>
-  <li>
-    <p>Open Outlook.com or Microsoft.com.</p>
-  </li>
-  <li>
-    <p>Click or tap the account icon, in the top-right of the website.  Note: this is not the icon in the browser tool bar.</p>
-  </li>
-  <li>
-    <p>If you are not signed in to your account, select “Sign in”.</p>
-  </li>
+<ul>
   <li>
-    <p>When you are signed in, click or tap on the account icon, and then  “My Microsoft account”.</p>
+    <p>Reference: <a href="https://support.microsoft.com/en-us/account-billing/microsoft-to-stop-sending-sms-codes-for-personal-accounts-31b80825-bdd0-4bf2-926b-dca3c35ee4c1">Microsoft to stop sending SMS codes for personal accounts</a></p>
   </li>
   <li>
-    <p>In the “Security” section, select either “Manage how I sign in”, or “Additional security options”.</p>
+    <p>My notes: <a href="/2026/04/20/microsoft-contact-info.html">Do Microsoft accounts require a recovery email address or a mobile number?</a></p>
   </li>
-</ol>
-
-<p>You can link a new email address by selecting “Add a new way to sign in or verify”.</p>
-
-<p>For recovery purposes, your other email will be your primary account.  This means the simplest way to proceed is to go back to the beginning, and secure this other email account.</p>
+</ul>
 
-<p>In the steps after that, we can create recovery and security plans for a password manager, passkeys, etc.  This will make it simpler for us to manage all your passwords, accounts, and options for two-step verification.</p>
+<p>You could create a <a href="https://support.google.com/mail/answer/56256?hl=en">new Gmail account</a>, for free.  Or, you can <a href="https://support.google.com/accounts/answer/76194">add a Gmail address</a> to an existing Google account.  Many people already have a Google account, e.g. because they use an Android phone.</p>
 
-<p>If you are ready now, there are two options to secure your Microsoft account:</p>
+<p>If you use an iPhone, you could create an <a href="https://support.apple.com/en-gb/guide/icloud/mmdd8d1c5c/1.0/icloud/1.0">iCloud Mail</a> address.</p>
 
-<p><em>Cyber Aware</em> says to turn on two-step verification for Microsoft account, following the Microsoft guide.</p>
+<p>Once you have an alternative email address you can add, or to verify your current contact info, see:</p>
 
 <ul>
-  <li><a href="https://support.microsoft.com/en-us/account-billing/how-to-use-two-step-verification-with-your-microsoft-account-c7910146-672f-01e9-50a0-93b4585e7eb4">How to use two-step verification with your Microsoft account - Microsoft Support</a></li>
+  <li><a href="https://support.microsoft.com/en-us/account-billing/microsoft-account-security-info-verification-codes-bf2505ca-cae5-c5b4-77d1-69d3343a5452">Microsoft account security info &amp; verification codes</a></li>
 </ul>
 
-<p>Microsoft want you to “increase the security of your account by removing your password and signing in with a passwordless method instead.”  If your sign-in settings currently show a password, you will need to install the Microsoft Authenticator app on your phone, before you can go passwordless.</p>
+<p>Now the simplest way to proceed is to go back to the beginning, and secure your <em>other</em> email account.</p>
 
-<ul>
-  <li><a href="https://support.microsoft.com/en-us/account-billing/how-to-go-passwordless-with-your-microsoft-account-674ce301-3574-4387-a93d-916751764c43">How to go passwordless with your Microsoft account - Microsoft Support</a></li>
-</ul>
+<p>In the steps after that, we can create recovery and security plans for a password manager, passkeys, etc.  This will make it simpler to manage all your accounts, passwords, and options for two-step verification.</p>
+
+<p>If you have made your recovery plans now, there are two options to secure your Microsoft account:</p>
+
+<ol>
+  <li>
+    <p><em>Cyber Aware</em> says to turn on two-step verification for Microsoft account, following the Microsoft guide:</p>
+
+    <p><a href="https://support.microsoft.com/en-us/account-billing/how-to-use-two-step-verification-with-your-microsoft-account-c7910146-672f-01e9-50a0-93b4585e7eb4">How to use two-step verification with your Microsoft account - Microsoft Support</a></p>
+  </li>
+  <li>
+    <p>Microsoft says you could “increase the security of your account by removing your password and signing in with a passwordless method instead.”</p>
+
+    <p>If your sign-in settings currently show a password, you will need to install the Microsoft Authenticator app on your phone, before you can go passwordless:</p>
+
+    <p><a href="https://support.microsoft.com/en-us/account-billing/how-to-go-passwordless-with-your-microsoft-account-674ce301-3574-4387-a93d-916751764c43">How to go passwordless with your Microsoft account - Microsoft Support</a></p>
+  </li>
+</ol>
 
-<p>Either of these will provide a great improvement, by reducing the risks of stolen passwords.</p>
+<p>Either option would be a great improvement, because they reduce the risk of stolen passwords.</p>
 
-<p>I would not turn on both options at once.  It would make it harder to sign in - and easier to get locked out.</p>
+<p>If you use <em>both</em> options, you will need to take extra care.  It will make it harder to sign in, and easier to get locked out.</p>
 
-<p>If your recovery plan relies on an already-added mobile number, you should ask your mobile carrier what you will need to recover the phone number, when you lose your phone.</p>
+<p>If your recovery plan relies heavily on a mobile number, you should ask your mobile carrier what you will need to recover the phone number, before you lose your phone.</p>
 
 <h3 id="strong-and-separate-password">Option 2: Use a strong and separate password</h3>
 
@@ -328,36 +320,6 @@ <h2 id="next-steps">Next steps</h2>
 - [Cyber Aware top tips - Backing up your data](https://www.ncsc.gov.uk/collection/top-tips-for-staying-secure-online/always-back-up-your-most-important-data)
 -->
 
-<h2 id="footnotes">Footnotes</h2>
-<div class="footnotes" role="doc-endnotes">
-  <ol>
-    <li id="fn:msa-contact-forced">
-
-      <ul>
-        <li>
-          <p>“How to fix “make sure you can receive a security code” when signing in to my Microsoft account […] After seven days from the first notice you’ll have to verify or add new security info before you can sign in again.” – <a href="https://support.microsoft.com/en-gb/account-billing/troubleshoot-microsoft-verification-code-issues-409090c4-92b5-42b9-8ae6-bcc97e62fc48">Troubleshoot Microsoft verification code issues</a>.  <a href="https://web.archive.org/web/20260315134739/https://support.microsoft.com/en-gb/account-billing/troubleshoot-microsoft-verification-code-issues-409090c4-92b5-42b9-8ae6-bcc97e62fc48">Archived</a> from the original on 2026-03-15.</p>
-        </li>
-        <li>
-          <p>“We will ask for an email address or phone number that we can send a verification code to.” – <a href="https://support.microsoft.com/en-us/account-billing/help-us-secure-your-account-548970dd-45df-49ca-a21c-c87e47bd421c">Help us secure your account</a>.  <a href="https://web.archive.org/web/20260313002247/https://support.microsoft.com/en-us/account-billing/help-us-secure-your-account-548970dd-45df-49ca-a21c-c87e47bd421c">Archived</a> from the original on 2026-03-13.</p>
-        </li>
-        <li>
-          <p>“When you create a new Microsoft account, whether via your Xbox console or online, you’re asked to add security info. When you do so, you’ll receive a security code at the phone number or email address you provided.” – <a href="https://support.xbox.com/en-US/help/account-profile/signin-security/add-security-contact-information">Add security info to your Microsoft account</a>.  <a href="https://web.archive.org/web/20251006113422/https://support.xbox.com/en-US/help/account-profile/signin-security/add-security-contact-information">Archived</a> from the original on 2025-10-06.</p>
-        </li>
-        <li>
-          <p>More specifically, Microsoft forces you to add at least one piece of “security info” which they can send a <em>security alert</em> to.  This “could be a phone number or email address”.  Notice that a passkey cannot recieve alerts.  In theory, Microsoft Authenticator could be used as an alternative, but it was not accepted when I tried.  There is a critical procedure which requires this contact information.  See:  <a href="https://support.microsoft.com/en-us/account-billing/what-does-security-info-change-is-still-pending-mean-cbd0f64f-02d9-45d2-90c3-2375e5a72e52">What does “Security info change is still pending” mean?</a></p>
-        </li>
-      </ul>
-      <p><a href="#fnref:msa-contact-forced" class="reversefootnote" role="doc-backlink">&#8617;</a></p>
-    </li>
-    <li id="fn:msa-no-phone">
-      <p>See notes in <a href="https://support.microsoft.com/en-us/account-billing/microsoft-account-security-info-verification-codes-bf2505ca-cae5-c5b4-77d1-69d3343a5452">Microsoft account security info &amp; verification codes</a>.  <a href="https://web.archive.org/web/20260415152634/https://support.microsoft.com/en-us/account-billing/microsoft-account-security-info-verification-codes-bf2505ca-cae5-c5b4-77d1-69d3343a5452">Archived</a> from the original on 2026-04-15. <a href="#fnref:msa-no-phone" class="reversefootnote" role="doc-backlink">&#8617;</a></p>
-    </li>
-    <li id="fn:msa-sms-phaseout">
-      <p>See note in <a href="https://support.microsoft.com/en-us/account-billing/how-to-use-two-step-verification-with-your-microsoft-account-c7910146-672f-01e9-50a0-93b4585e7eb4">How to use two-step verification with your Microsoft account</a>.    <a href="https://web.archive.org/web/20260406070047/https://support.microsoft.com/en-us/account-billing/how-to-use-two-step-verification-with-your-microsoft-account-c7910146-672f-01e9-50a0-93b4585e7eb4">Archived</a> from the original on 2026-04-06. <a href="#fnref:msa-sms-phaseout" class="reversefootnote" role="doc-backlink">&#8617;</a></p>
-    </li>
-  </ol>
-</div>
-
   </div>
 
 </article>

2026/04/20/microsoft-contact-info.html

@@ -3,9 +3,9 @@
   <meta charset="utf-8">
   <meta http-equiv="X-UA-Compatible" content="IE=edge">
   <meta name="viewport" content="width=device-width, initial-scale=1"><!-- Begin Jekyll SEO tag v2.8.0 -->
-<title>Do Microsoft accounts require a recovery email address or mobile number? | Blog?</title>
+<title>Do Microsoft accounts require a recovery email address or a mobile number? | Blog?</title>
 <meta name="generator" content="Jekyll v4.4.1" />
-<meta property="og:title" content="Do Microsoft accounts require a recovery email address or mobile number?" />
+<meta property="og:title" content="Do Microsoft accounts require a recovery email address or a mobile number?" />
 <meta property="og:locale" content="en_US" />
 <meta name="description" content="Shortly after I finished writing up their security and recovery system, Microsoft decided to change it. So I went back again and checked how everything works. These are my test results." />
 <meta property="og:description" content="Shortly after I finished writing up their security and recovery system, Microsoft decided to change it. So I went back again and checked how everything works. These are my test results." />
@@ -15,10 +15,10 @@
 <meta property="og:type" content="article" />
 <meta property="article:published_time" content="2026-04-20T00:00:00+01:00" />
 <meta name="twitter:card" content="summary" />
-<meta property="twitter:title" content="Do Microsoft accounts require a recovery email address or mobile number?" />
+<meta property="twitter:title" content="Do Microsoft accounts require a recovery email address or a mobile number?" />
 <meta name="google-site-verification" content="f-br5hK_AXBHVuLbIOEqQdK8b5N1kVsM4WGjtpdlBao" />
 <script type="application/ld+json">
-{"@context":"https://schema.org","@type":"BlogPosting","dateModified":"2026-04-20T00:00:00+01:00","datePublished":"2026-04-20T00:00:00+01:00","description":"Shortly after I finished writing up their security and recovery system, Microsoft decided to change it. So I went back again and checked how everything works. These are my test results.","headline":"Do Microsoft accounts require a recovery email address or mobile number?","mainEntityOfPage":{"@type":"WebPage","@id":"/2026/04/20/microsoft-contact-info.html"},"url":"/2026/04/20/microsoft-contact-info.html"}</script>
+{"@context":"https://schema.org","@type":"BlogPosting","dateModified":"2026-04-20T00:00:00+01:00","datePublished":"2026-04-20T00:00:00+01:00","description":"Shortly after I finished writing up their security and recovery system, Microsoft decided to change it. So I went back again and checked how everything works. These are my test results.","headline":"Do Microsoft accounts require a recovery email address or a mobile number?","mainEntityOfPage":{"@type":"WebPage","@id":"/2026/04/20/microsoft-contact-info.html"},"url":"/2026/04/20/microsoft-contact-info.html"}</script>
 <!-- End Jekyll SEO tag -->
 <link rel="stylesheet" href="/assets/main.css"><link type="application/atom+xml" rel="alternate" href="/feed.xml" title="Blog?" /></head>
 
@@ -44,7 +44,7 @@
 <article class="post h-entry" itemscope itemtype="http://schema.org/BlogPosting">
 
   <header class="post-header">
-    <h1 class="post-title p-name" itemprop="name headline">Do Microsoft accounts require a recovery email address or mobile number?</h1>
+    <h1 class="post-title p-name" itemprop="name headline">Do Microsoft accounts require a recovery email address or a mobile number?</h1>
     <p class="post-meta">
       <time class="dt-published" datetime="2026-04-20T00:00:00+01:00" itemprop="datePublished">Apr 20, 2026
       </time></p>
@@ -53,17 +53,17 @@ <h1 class="post-title p-name" itemprop="name headline">Do Microsoft accounts req
   <div class="post-content e-content" itemprop="articleBody">
     <p><em>Shortly after I finished writing up their security and recovery system, Microsoft decided to <a href="https://support.microsoft.com/en-us/account-billing/microsoft-to-stop-sending-sms-codes-for-personal-accounts-31b80825-bdd0-4bf2-926b-dca3c35ee4c1">change it</a>.  So I went back again and checked how everything works.  These are my test results.</em></p>
 
-<p>Every Microsoft account has at least one email address (or phone number).  If you don’t have an existing address, you can create one on Outlook.com.</p>
+<p>A personal Microsoft account requires at least one email address (or phone number).  If you don’t have an existing email address, you can create one on Outlook.com.</p>
 
-<p>When you create an Outlook.com account, it tends not to ask for any other contact information.  However, Microsoft will require you to add security contact info later on.</p>
+<p>When you create an Outlook.com account, it tends not to ask for any other contact information.  However, Microsoft will require you to add alternative contact info later on.</p>
 
 <p>Video example: <a href="https://www.youtube.com/watch?v=iS6WC9qeJTQ">How To Create a Microsoft Account</a>, by Aldo Jones (2025-12-30).</p>
 
-<p>At the end of Aldo’s video, he opens the Privacy section in Microsoft account.  This required him to add contact info, before he could actually open the Privacy section.</p>
+<p>At the end of Aldo’s video, he opens the Privacy section in Microsoft account.  Before he can actually use the Privacy section, he is required to add contact info.</p>
 
 <p>The same requirement applies to the “Manage how I sign in” page, in the Security section.</p>
 
-<p>You can pass this requirement by adding a recovery email address, or creating your account using a non-Microsoft email.</p>
+<p>You can pass this requirement by adding a recovery email address, or using a non-Microsoft email when you create your account.</p>
 
 <p><strong>Contents</strong></p>
 
@@ -151,7 +151,7 @@ <h2 id="what-types-of-contact-information-can-i-use">What types of contact infor
 
 <p>In addition, you can add one or more alternative email addresses as contact info.</p>
 
-<p>Microsoft say you can no longer add a phone number.  If you have already added a mobile number to your account, you can still use that number at the moment.  However, Microsoft is phasing out the use of phone numbers:</p>
+<p>Microsoft say you can no longer add a phone number.  If you have already added a mobile number to your account, you can still use that number at the moment.  However, Microsoft is phasing out the use of phone numbers.</p>
 
 <p>Sources:</p>
 
@@ -218,7 +218,7 @@ <h2 id="sidenote-what-do-they-do-with-my-main-email-address">Sidenote: What do t
 
 <p>See: <a href="https://webapps.stackexchange.com/questions/181341/why-does-my-outlook-com-account-say-share-or-use-my-details-with-microsoft-part">Why does my Outlook.com account say “Share or use my details with Microsoft Partners”?</a></p>
 
-<!--
+<!-- CUT TEXT
 
 Note: in this case, Edge kept me permanently signed in to the Microsoft account website.