Ed Bott - Windows 10 Support Secrets

38 CHAPTER 3 | Staying secure Figure 3-2: When you sign in to your Microsoft account for the first time on a new device, you might be asked to approve a security request using a smartphone app—in this case, the Microsoft Account app on an Android device. If your organization uses Microsoft Office 365 or Azure Active Directory and you want to turn on 2FA, you need the Azure Authenticator app. For detailed instructions on how to acquire and set up 2FA using this app, read this article : https://azure.microsoft.com/documentation/articles/multi-factor- authentication-azure-authenticator/ . And, of course, on hardware that supports Windows Hello, such as Microsoft’s Surface Book and Surface Pro 4, you can use a fingerprint or facial recognition to establish your identity. Securing your data If your PC is lost or stolen, anyone with physical access to it can try to access the data on it even if they can’t sign in with your account credentials. Simple documents can contain important secrets, including bank account details, Social Security numbers, and other information that can potentially be used for identity theft. The best protection against that kind of theft is to encrypt drives, especially on mobile devices, so that an attacker who gains access to that drive can’t read its contents.