Current Employee
Sign in to access the full security guide, phishing tips, and your personalized account checkup.
Opens a secure Microsoft popup. We never see your password.
Forgot Your Password?
Reset it yourself — verify with your phone, create a new password. No need to call IT.
Password Reset PageNew Employee
Welcome to Luke & Spencer! Your IT admin has created your account. Here's what to expect during setup.
Create a passphrase only you know — something like "My dog loves Tuesday mornings!"
Download Microsoft Authenticator from the App Store or Google Play.
Scan a QR code to link the app, then add your phone number as backup.
Sign in, tap "Approve" on your phone, and you're all set.
Setup takes about 5–10 minutes with your IT admin.
Your Important Links
Bookmark these — you'll need them from time to time.
Reset Your Password
Use this if you've forgotten your password and can't sign in. Verify your identity with your phone and create a new one.
Manage Your Security Info
Manage how you verify your identity — phone, Authenticator app, and backup methods. Also where you can change your password.
Setting Up the Authenticator App
The Microsoft Authenticator app is like a digital key on your phone. When you sign in, you'll get a quick notification to tap "Approve" — it's faster than waiting for a text message and much more secure.
How to Set It Up
- Download the app — Search for "Microsoft Authenticator" in the App Store (iPhone) or Google Play (Android). It's free.
- Go to your security info page — On your computer, visit aka.ms/mysecurityinfo and sign in.
- Click "Add sign-in method" — Choose "Authenticator app" from the dropdown.
- Scan the QR code — Open the Authenticator app on your phone, tap the "+" button, choose "Work or school account", then point your phone camera at the QR code on your screen.
- Test it — Microsoft will send a test notification to your phone. Tap "Approve" and you're done!
Tip
After setup, set the Authenticator app as your default sign-in method on the security info page. That way you'll always get the quick tap-to-approve notification instead of a text message.
Creating a Strong Password
A long password is a strong password. We recommend using a passphrase — a short sentence that's easy for you to remember but impossible for a hacker to guess.
Password123!
LukeSpencer2026
Summer2025!
My dog loves Tuesday mornings!
Coffee at 7am makes me happy
Purple mountains taste like rain42
Do
- Use 14+ characters
- Use a sentence or phrase
- Make it unique to this account
- Use a password manager
Don't
- Use your name or birthday
- Use the same password everywhere
- Share it with anyone (even IT)
- Write it on a sticky note
Spotting Fake Emails (Phishing)
Scammers send emails that look real but are designed to trick you into clicking a bad link or giving up your password. Here's how to spot them.
Warning Signs
- Urgency — "Act now!" or "Your account will be locked!"
- Unfamiliar sender — Check the actual email address, not just the display name
- Suspicious links — Hover over links before clicking to see where they really go
- Asking for your password — No one at L&S will ever ask for your password
- Spelling/grammar errors — Professional companies proofread their emails
- "[External]" tag — Emails from outside L&S now show this tag. Be extra careful with these.
If you get a suspicious email:
Do NOT click any links or open any attachments. Click the "Report" button in Outlook to flag it. If you're not sure, forward it to and ask.
About the "Approve" Notifications
When you sign in, your phone will ask you to approve the login. This is called Multi-Factor Authentication (MFA) and it's your best defense against hackers.
Important
If you get an "Approve sign-in" notification and you are NOT trying to sign in, tap DENY immediately. This means someone has your password and is trying to get into your account. Contact right away.
Normal behavior
You'll see an approve notification when you sign in on a new device, after clearing your browser, or when your login session expires (usually every few weeks). This is expected — just approve it and carry on.
Common Questions
I forgot my password. What do I do?
Go to passwordreset.microsoftonline.com and follow the prompts. You'll need your phone to verify your identity, then you can create a new password. No need to contact IT!
I want to change my password (I know my current one)
Go to myaccount.microsoft.com, sign in, click "Change password", type your old password and your new one. Done!
I got a new phone. How do I move the Authenticator app?
On your old phone, open the Authenticator app and go to Settings to enable cloud backup. On your new phone, install the Authenticator app and sign in with your personal Microsoft account to restore. If you no longer have your old phone, contact and we'll reset your MFA so you can set it up fresh.
What if I can't use my phone for some reason?
Make sure you have at least two verification methods set up at aka.ms/mysecurityinfo. If you're completely locked out and can't verify your identity, contact for assistance.
Why do I keep getting asked to sign in?
You may be asked to sign in again if: your session expired, you cleared your browser cookies, you're using a new device or browser, or a security update was applied. This is normal and protects your account.
Someone else knows my password. What do I do?
Change it immediately at myaccount.microsoft.com and notify . We may need to review your account for any unauthorized access.
Something went wrong. Please try again or contact IT.
Your Verification Methods
Here's what you can do to fix the items above: