Managing personal Outlook.com account settings, security, and privacy
Well, I don't have a phone thingy like that. That's why I enabled two-step verification. If someone tries to login and they're not on a trusted device, they are required to enter a code which they must retrieve from my secondary email address account. No code, no entry.