Technologies

Doing these 5 things can help you lock down your Microsoft 365 account and keep hackers at bay

Even the US government isn’t immune to hackers compromising its Microsoft Office software. This is how to protect your own Microsoft apps and accounts.

Earlier this year, news broke that foreign hackers had for months been secretly monitoring email accounts and communications between US government officials in charge of identifying foreign threats to national security. The attackers executed their intrusion through malicious code in an IT product called SolarWinds, which allowed them to access the network and break into Microsoft’s email client.

Microsoft released guidance for how organizations can bolster security to attempt to avoid these attacks, and said that it has not identified any Microsoft product vulnerabilities.

There may not be much you can do about the SolarWinds vulnerability or others like it. But if you get your work or personal email through Outlook on Microsoft 365, there are ways to better secure your individual account and avoid hacks. (If you use Windows 10, there are also several security defaults that you can change to better protect your device — many of which will also be available in the upcoming Windows 11.)

Here are five ways to lock down your Microsoft account.

Read more: How to get Microsoft 365 for free

1. Set up multifactor authentication

Multifactor authentication is the best way to protect yourself from someone stealing your login credentials, according to the US Cybersecurity and Infrastructure Security Agency. Basically, it adds an extra layer of security to your account sign-in — for example, you enter your password along with a verification code sent to your phone or provided by an authenticator app.

To set up multifactor authentication (also called two-step verification), go to the security basics page, and sign in with your Microsoft account. Select More security options. Under Two-step verification, choose Set up two-step verification to turn it on and get further instructions.

To set it up on a work Microsoft 365 account, your administrator will have to enable it. Once that’s done, when you sign in with your username and password, you’ll be prompted for more information. Click Next.

The default authentication method is to use the free Microsoft Authenticator app, which you can download on your mobile device. This app gives you a unique code to enter that expires after a certain amount of time.

Or, if you’d rather get a code through SMS message, you can choose «I want to set up a different method.» Microsoft will ask for your mobile number, and send you a text with a six-digit code to verify your account.

2. Protect your password

Never use the same password for multiple accounts. There are lots of great password managers available to help you keep track of all your passwords, including the free LastPass. You should also choose a strong password — one that avoids using common words and is at least eight characters long. Check out our other recommendations for choosing a strong password here.

3. Avoid phishing scams

If you get an email about the security of your Microsoft account, it could be a phishing scam — a type of attack where hackers impersonate a company or someone you know to trick you into revealing personal information like passwords or credit card numbers. These emails often include a link to a malicious website, which you should never click.

The best way to avoid these emails is to know how to spot them — they might have misspelled words, be from a slightly misspelled source (like microsoftsupport.ru or micros0ft.com) or include an urgent call to take action or avoid a threat. If anything looks suspicious, just delete it, or report it by forwarding it to the Anti-Phishing Working Group at phishing-report@us-cert.gov.

4. Protect your apps

On your phone or desktop, only install and run apps from legitimate sources, like the app store for your device. If you’re using Microsoft 365, using Microsoft apps to access those accounts is the most secure choice, according to the company. You should also make sure all apps as well as your operating system are up to date — many updates you get are security fixes, so be sure to install them quickly.

5. Make it easy to recover your account

You can set up your account to make it easy to recover in case all else fails and you do get hacked. To do that, go to the Microsoft security basics page, and add in all the information, like your email address and phone number. Make sure you keep this information up to date to keep your account safer.

For more, check out our security tips if you’re still running Windows 7, how to download Windows 10 free and how to download Windows 11 free.

Technologies

Google’s New AI Features Are Trying to Make Data Entry a Thing of the Past

More Gemini AI features will come to Google Docs, Sheets and Slides.

The latest batch of Google updates to its workspace tools highlights AI’s promise to automate mundanity in the workplace. Google Docs, Slides, Sheets and Drive all have new AI-powered features, the company announced Tuesday. The one thing all these updates have in common? Gemini is using your files, emails and chats to give you relevant information, not random answers gleaned from the web.

These updates come as AI is playing a bigger role in our work lives, for better or worse. Agentic tools like Claude Cowork and coding assistants like Anthropic’s Claude Code and OpenAI’s Codex are more capable than chatbots and able to handle tasks announced independently. AI tools are also becoming more customized, with Google’s personalized intelligence rolling out across its platforms to help refine AI outputs to things that are relevant and useful for you. Google continues that trend with this new batch of Workspace updates.

New Gemini AI features in Google Workspace apps will cite their sources after each query. For example, if you ask Gemini in Google Docs to fill out an itinerary template, it will pull the information from your email, chats and files. The «sources» tab in the Gemini side panel will show you where it found the information it used, like your flight confirmation email and chats discussing dinner plans. Seeing where Gemini pulled its answers from is also how you’ll double-check Gemini’s work.

The most impressive new features are in Sheets, where AI can fill in the holes in your spreadsheets. You can describe what you want the AI to do with a simple prompt and avoid writing an exact formula. You can click on an empty cell, select the pop-up that says «Drag to fill with Gemini,» then highlight the cells you want Gemini to fill in. That deploys an AI agent to search the web to fill each cell with the necessary information.

For example, if you have a spreadsheet of the contact info for local companies, you can have Gemini search the web to fill in a the location, CEO and other publicly available information of each company. The tool aims to dramatically reduce the time needed for manual data entry. Gemini can also summarize, categorize and create charts with prompts alone.

You can also chat with Gemini in Sheets and have it scour your raw data to make custom reports and charts. No need for pivot tables if they confound you as much as they baffle me. One of the biggest uses of AI at work is helping create presentations.

In Google Slides, you can now tell Gemini in natural language what you want to appear on a slide, and it will create it, matching the style of your existing slides. You can also ask Gemini to edit your slides if you don’t want to waste time painstakingly moving design elements around the slide. The AI should fill the slides with relevant information based on your instructions and the work files it has access to, so you shouldn’t need to replace a bunch of filler text.

If you use Docs, Sheets and Slides through the Workspace account of your company, then you won’t be able to turn off AI features individually. The managing company is in control of AI access for users. Personal users can tweak their settings to limit Gemini. The new features are rolling out in beta now, in English only, to Google AI Ultra and Pro subscribers in the US, as well as some Google Workspace customers who are part of the Gemini Alpha testing program.

For more, check out the new cowork feature in Copilot and how to use Perplexity AI for deep research.

Technologies

Nintendo Switches Lanes, Sues US Over Tariffs

Mario wants his money back.

Tariffs implemented by President Donald Trump were struck down by the Supreme Court last month. Companies that were subjected to those fees, such as FedEx and Dollar General, have since sued the federal government, and Nintendo wants a piece of the action.

Nintendo filed a lawsuit against the federal government in the US Court of International Trade on Friday, as first spotted by Aftermath. The complaint seeks refunds of tariffs Nintendo paid, plus interest, and asks the court to declare the tariffs unlawful and stop the government from collecting them going forward.

«Since February 1, 2025, President Trump has executed the unlawful Executive Orders, imposing tariffs on imports from a vast swath of countries,» Nintendo said in the complaint.

When reached for comment, Nintendo of America confirmed the lawsuit.

«We can confirm that we filed a request. We have nothing else to share on this topic,» Nintendo of America said in an emailed statement on Friday, March 6.

It’s unclear how much Nintendo paid in tariffs, and it did not state an amount in the lawsuit. While the Switch 2 was priced at $450 when it launched last year, and has stayed at that amount, Nintendo did increase the price of the original Switch and accessories for both consoles. Microsoft and Sony also increased the prices of their hardware and accessories last year due to tariffs.

The White House didn’t immediately respond to a request for comment.

On Feb. 20, the Supreme Court ruled by a vote of 6 to 3 that the sweeping tariffs Trump instituted last year exceeded his executive powers. Following the ruling, on the same day, Trump announced a new set of tariffs of 10% on imported goods that would last for 150 days, starting Feb. 24.

The decision on what to do with the collected tariffs — a reported $166 billion — has been left to the US Court of International Trade. Judge Richard Eaton told the US Customs and Border Protection on Wednesday, March 4, to refund the importers that were forced to pay tariffs, which is more than 330,000. On Friday, the CBP said it couldn’t easily issue tariff refunds because its system requires duties to be recalculated and refunds processed entry by entry. This process would involve tens of millions of transactions. The agency said it’s updating its systems and could start providing refunds by late April.