2-Factor Authentication on MS Account

I have two-factor authentication setup on my Microsoft Account, (and all others that offer so I might be mixing and matching). When I first set it up, I had to create an app password for signing into Xbox. I rarely get prompted for credentials except in
certain situations like an update or reset. Now, the first couple times I went through this, I kept trying to use my MS account password and was getting really frustrated until I realized the enhanced security I placed on my account. I few times I disabled
it altogether, then re-enabled it, and have created multiple application passwords.

Now, this might sound like a stupid question (and I be mixing up companies) but, for nearly everything else I use I have several ways to authenticate myself;

1. A mobile app-generated authentication code (modern RSA token)

2. Email/Alternate email

3. Automated text message to verified number

4. "Is that you? Yes / No prompt on my mobile device.

It's been a while since I've needed to provide my credentials, so I'm not sure if any of this has changed but, will we see these options for Xbox Sign-On to be uniform with the others?

Shouldn't I be able to get a pop-up notification on mobile device saying "Hey, did you just try signing into Xbox? Approve / Deny"





I wasn't sure where to ask this since it crosses AORs with Xbox and MS Account Security in general.

On a side-note, application (burner) passwords should be phased out somehow. Average end-users will hold on to it leaving it vulnerable, others will forget about it completely like I did and potentially lock themselves out of their accounts. Plus, in-theory
application passwords are great, but they're rarely changed.

On a similar note: I had an Xbox One stolen a while ago---it was never recovered. A stolen Xbox isn't exactly high priority, and often law enforcement isn't tech-savy or motivated enough. There needs to be better tools available to the users. Once it's reported
stolen, there should be a Kicket image of anyone trying to use it, geo-location and IP where it's used, etc.

I'd much rather have as much information as possible to provide to give to authorities for a stolen device instead of hoping they can find with just a serial number.

:)

 

This Email Address or Password is incorrect

Do you have 2 step verification enabled on your Live Account?

If so, check out this guide -
majornelson.com/.../using-microsoft-two-factor-authentication-with-your-xbox-live-account

 

I'm getting "The password you entered isn't valid" And I know it's valid.

For me, I disabled the 2 factor security on my account via my laptop, then was able to agree to terms of service as the parent, just using my single factor ID/Password. I think the xbox console could not deal with this 2 factor in the terms of service parent's
agreement. Yes, this absolutely sucks, Microsoft!

majornelson.com/.../using-microsoft-two-factor-authentication-with-your-xbox-live-account