Back in April, Microsoft added two-factor authentication to Microsoft accounts. That service has now been enhanced with recovery codes to use if you lose the two-factor device, as well as improved tracking of recent login activity.
As with the original two-factor rollout, this may not appear on your account immediately. You can generate security codes even if you're not using two-factor. As with Google's similar offering, you can only have one recovery code at a time.