Someone is trying to hack my Microsoft account

   I've gotten multiple emails containing a password reset code. As I did not initiate these requests, someone is attempting to change my password. So what can be done? Short of deleting my account or changing my email address... which are both ridiculously terrible solutions, is there any way I can stop them from chipping away at my security? Can Microsoft block their IP from trying to make changes to my account? Any help would be appreciated.
Hello DDMicro

First, simply getting a Password Reset code only means that someone (or a bot) is clicking on <Forgot Password> which generates the email. There is nothing you (or anyone) can do to prevent that.

Certainly wouldn't go through the aggravation of deleting the account or changing your email address.

First step to take would be to check your account login activity and check for any unexpected successful log ins.

Check the recent sign-in activity for your Microsoft account
https://support.microsoft.com/en-us/help/402664...

If you find an unexpected successful login, then your account has been hacked and if you are still able to, change your account password immediately. Also, would recommend enabling 2 factor authentication if it isn't already

How to use two-step verification with your Microsoft account
https://support.microsoft.com/en-ca/help/12408/...

You would also be well advised to check for any unexpected forwarding rules because one common tactic is to forward incoming emails to their account

Use inbox rules in Outlook.com
https://support.office.com/en-us/article/use-in...

Turn on or off automatic forwarding in Outlook.com
https://support.office.com/en-us/article/turn-o...

At the end of the day, if there haven't been any unexpected successful log in attempts, then you have nothing to worry about but would certainly keep checking your login activity.

One of the ways that this all comes about is if you've used your email address to sign up for something (i.e. subscription etc) and the database for that website has been breached. Hackers will attempt to user the same email address/password they found to see if they can sign into various things which would include such things like Facebook, Paypal, Amazon etc etc. If you ever used the same email address/password combination on those sites, you also want to make sure to change those as well since it's not a case of <IF> the hackers will try but rather only a matter of <WHEN>.
Karl

143 people found this reply helpful

·

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

I do not think it is a bot trying to hack my account I have gotten multiple messages with a Microsoft security code and I checked my recent activity there was unsuccessful sign in from Detroit one on Xbox and another was on mobile and it was not the same IP address that I usually use so it was not me I have two-factor authentication and a phone number set up with my Microsoft account am I still saved from the person who is trying to hack my account

99 people found this reply helpful

·

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

 
 

Question Info


Last updated May 14, 2024 Views 77,080 Applies to: