Private browsing
In private browsing sessions, you're always prompted to enter a verification code each time you sign in, even if you have previously selected Don't ask again on this device. In private browsing sessions, the browser does not access pre-existing cookies. Also, the browser does not save new cookies, site data, browsing history or the information you enter into forms.
Examples:
Important: This help article applies to the Single Sign-on service, which is being replaced by Microsoft Multi-Factor Authentication (MFA).
When you enter a verification code and select Don't ask again on this device, we store a cookie in your web browser so that you don't have to enter a code again. This means that a trusted device is specific to the browser. For example, if you select Don't ask again on this device when signing in with Internet Explorer, you're still prompted to enter a verification code in Google Chrome on the same computer.
Incognito window in Google Chrome
The browser window is black or dark grey, rather than light grey:
InPrivate window in Microsoft Edge
The InPrivate label at the top left denotes when you're using an InPrivate window:
Private browsing in Safari on iPhone, iPad or iPod touch
When private browsing is on, the Safari window is dark grey and the Private button is selected.
Blocked cookies in Safari on iPhone, iPad and iPhone touch
If you block cookies in Safari, you're always prompted to enter a verification code each time you sign in, even if you have previously selected Don't ask again on this device. To review your settings:
- In iOS 11, open the Settings app and go to Safari > Privacy & Security. There's an option labelled Block All Cookies.
- In iOS 8, 9 or 10, open the Settings app and go to Safari > Privacy & Security > Block Cookies. Choose from Always Block, Allow from Current Website Only, Allow from Websites I Visit or Always Allow.
- In iOS 7 or earlier, open the Settings app and go to Safari > Privacy & Security > Block Cookies. Choose from Never, From third parties and advertisers or Always.
Two-step authentication help
- Turn on two-step authentication
- Sign in with an authenticator app
- Sign in with a text message
- Sign in when you don't have your phone with you
- Backup verification codes
- What duration should I choose?
- Lost or stolen phones
- Use an alternative device to authenticate
- New device or changed phone number
- Revoke remembered devices
- Private browsing
- Allow cookies from the Single Sign-on domain
Temporarily without a phone or unable to use a phone, for some reason? Your options are:
- Use backup codes to verify, you'll need to print these in advance
- Use an alternative device to authenticate, this must be a secondary device