Login.live.com is Microsoft's sign-in portal for Outlook, OneDrive, and other Microsoft accounts

When you see login.live.com in your browser, you are on Microsoft's authentication server — the page that checks your username and password before letting you into Outlook.com, Hotmail, OneDrive, Xbox Live, or any other service tied to a Microsoft account. You do not create a separate account there. It is the gateway, not the destination.

The address itself tells you something useful: "live" refers to Microsoft's older Live brand (Hotmail, Windows Live Messenger, SkyDrive), which Microsoft merged into what is now called a Microsoft account. The domain still exists because millions of people use it every day, and Microsoft keeps it running even though the branding has changed.

If you landed on this page by accident, or you are unsure whether a login page you found is real, the section below explains how to tell the difference between the genuine Microsoft sign-in and a fake one designed to steal your password.

Key Takeaways

  • Login.live.com is Microsoft's real sign-in page for Outlook, Hotmail, OneDrive, and Microsoft accounts — not a separate service or account type.
  • The page will always show a Microsoft logo and the address bar will display login.live.com or login.microsoft.com with no extra words or numbers before or after.
  • Scammers create fake versions of this page to steal passwords, so never sign in if the URL has typos, extra characters, or does not match exactly.
  • If you are already signed into one Microsoft service, you usually do not need to visit login.live.com again — you stay signed in across all of them.

When you actually land on login.live.com

You see this page when you click "Sign in" on Outlook.com, Hotmail.com, OneDrive.com, or Xbox.com, or when your session expires and Microsoft needs to verify who you are again. The page itself is straightforward: a Microsoft logo, a field for your email address or phone number, and a field for your password. Nothing else.

After you enter your credentials, Microsoft checks them against its database. If they match, you get a second screen asking for a verification method — usually a code sent to your phone or email, or a prompt on another device you own. This second step is called multi-factor authentication, and it is now standard for Microsoft accounts, especially if you use Outlook or OneDrive.

Once you pass both steps, you are redirected to whichever service you were trying to reach. You do not stay on login.live.com. The page is a checkpoint, not a destination.

How to tell if a login page is real or fake

Scammers build fake versions of login.live.com to harvest passwords. The fake pages look nearly identical to the real one, which is why the URL matters more than the design. Before you enter your password anywhere, check these three things:

The address bar must show exactly login.live.com or login.microsoft.com. No extra words, no numbers, no hyphens, no misspellings. If it says logon-live.com, login-live.com, or login.live.co, it is not real. If there is anything before the domain name (like find-login.live.com or verify-login.live.com), it is fake. Scammers rely on people not reading the full URL.

The page should have a padlock icon in the address bar. This means the connection is encrypted. If there is no padlock, or if your browser shows a warning about the site being unsafe, leave when ready.

The page should never ask for your password twice, or ask for unusual information. Microsoft will never ask for your Social Security number, credit card, or bank details on a sign-in page. If a page claiming to be login.live.com asks for these things, it is a phishing scam.

The difference between login.live.com and login.microsoft.com

Both addresses are real and both belong to Microsoft. Login.microsoft.com is the newer URL, and Microsoft gradually moved users there over the past several years. You might see either one depending on which service you are signing into or when you last signed in.

If you bookmark one and want to use the other, both will work. They redirect to the same authentication system. Microsoft keeps login.live.com active because changing the address for millions of users at once would cause confusion and support tickets. The "live" domain is not going away anytime soon.

What happens if you forget your password

On the real login.live.com page, there is a "Can't access your account?" link below the password field. Clicking it takes you through a recovery process where Microsoft asks you to verify your identity using a phone number, backup email address, or security questions you set up when you created the account.

Microsoft will send a code to your phone or email, and you enter that code to prove you own the account. Once verified, you can set a new password. This process usually takes a few minutes, though it can take longer if Microsoft needs extra verification.

If you cannot recover your account this way, you can contact Microsoft support, though response times vary. Having a backup email address and phone number on file makes recovery much faster.

Why you might see login.live.com in your browser history

If you use Outlook.com, OneDrive, or Xbox, your browser has probably visited login.live.com at some point — either when you first signed in, when your session timed out, or when you signed out and signed back in. This is normal and expected.

You should not see it in your history if you have not used any Microsoft services. If you find login.live.com in your history and you do not remember visiting it, it could mean someone else used your computer, or a malicious website tried to redirect you there. Check your Microsoft account activity (available in your account settings) to see if anyone signed in from an unfamiliar location or device.

Frequently Asked Questions

Is login.live.com safe to use?

Yes, the real login.live.com is safe. It is Microsoft's official sign-in page and uses encryption to protect your password. The danger is fake versions that look similar but have slightly different URLs. Always check the address bar before entering your password.

Do I need to create an account on login.live.com?

No. Login.live.com is not where you create accounts — it is only where you sign in. To create a Microsoft account, go to outlook.com or microsoft.com and look for a "Create account" or "Sign up" link. Once you have an account, you use login.live.com to sign in to it.

What should I do if I think I visited a fake login page?

Change your Microsoft account password when ready using a device you trust. Go to account.microsoft.com, sign in, and update your password. Then check your account activity for any sign-ins from unfamiliar locations. If you see suspicious activity, enable multi-factor authentication if you have not already.

Why does Microsoft use login.live.com instead of just microsoft.com?

Login.live.com is a separate domain for security reasons. It isolates the sign-in process from the rest of Microsoft's web properties, which reduces the risk of certain types of attacks. The "live" name is a holdover from when Microsoft owned the Live brand, but the domain is still actively maintained and find.