Prepare your or account for IMAP migration

Two-step verification helps protect you by making it more difficult for someone else to sign in to your email account. It uses two different forms of identity: your password, and a contact method. Even if someone else finds your password, they'll be stopped if they don't have access to your other devices or accounts.

You set up two-step verification with an email address, phone number, or authenticator app. When you sign in on a new device or from a new location, we'll send you a security code that you enter on the sign-in page as a second form of authentication in addition to your password.

After you have setup two-step verification, you can also obtain an app password that you or your admin will have to use in order to use Internet Message Access Protocol (IMAP) migration to copy email from your or account to your Office 365 for business account.

Turn on two-step verification and create an app password in or

  1. Sign in to or

  2. Go to the Security settings page.

    If you want to navigate to the Security settings page, in choose Settings > Options > Account details. Sign in to your email account again, and then choose Security & privacy > More security settings.

  3. Scroll down the page and choose Set up two-step verification.

    On the Security settings page, choose Set up two-step verification.

  4. Choose Next to start the setup wizard.

  5. At the Set up an identity verification app page, choose Other > Next.

  6. On your mobile device, download the Azure Authenticator from your app store.

    Choose on of the links take you to the Azure Authenticator for Windows Phone, Android or iOS.

  7. Open the Azure Authenticator app on your mobile device, and choose +. Scan the code on the Set up an authenticator app page.

  8. In step 4 on the Set up an authenticator app page, type the 6-digit code that's displayed on your mobile device (for example, 555111; you don't need to include any spaces).

    You don't need to memorize this password; it changes constantly and a new ones are sent to you via the Azure Authenticator app. This is why it's so secure. Whenever you sign in to your email account from a new device or location, look at your Azure Authenticator app and sign in using latest app password that's been sent to you instead of using your old static password.

  9. You'll get a message that two-step verification is turned on. Print your new recovery code (this isn't your app password). If you ever need to recover access to this account, this recovery code will help. It's a good idea to keep it tucked away in a safe place.

  10. Choose Next.

    If you use a Windows Phone 8 (or earlier) you need to replace the password you use to sign in to your email with the app password. This is also the app password you need to use instead of your password when you or your admin connects Office 365 to your or account to migrate the emails to Office 365.

  11. On the Set up your smart phone with an app password page, under the Update your Windows Phone 8 (or earlier) with an app password list, note the 16-digit app password in the list:

    Important: Even though the page indicates this is for Windows Phone 8 (or earlier), this list contains the app password your admin needs to migrate you or email to Office 365 for business. You will need this app password even if you set up two-step verification by using an Android or iPhone.

    Note the app password in step 4
  12. This is the app password you or your admin will use to migrate your or email to Office 365 for business.

Use your app password to migrate email messages

If your Office 365 admin is moving email messages from your or account to Office 365 on your behalf, you'll need to give him your app password. This way she can establish a temporary, secure connection between or and Office 365 to move your email messages.

Share Facebook Facebook Twitter Twitter Email Email

Was this information helpful?

Great! Any other feedback?

How can we improve it?

Thank you for your feedback!