Someone keeps trying to reset my account password

Anonymous
2020-06-12T12:16:44+00:00

I have received three emails over the last couple of days, on my recovery accounts that I use to get into my microsoft account if I am unable to get into it, with password reset codes. Every time I've gotten one I reset my microsoft password but then I get another one later that same day or the next day. I have two factor authentication turned on, I have the microsoft authenticator app set up for my account, and I get security notifications to my phone. It doesnt appear that whoever is trying to access my account has been successful as there is no recent log in activity in my security settings, that wasnt me, showing that someone was able to successfully get into my account but I am concerned that whoever is trying to get in is going to be successful at some point. When I have received these password reset emails with a reset code in them I have not received any alerts from the authenticator app to approve a log in but I have gotten the password reset code emails to two different account recovery email addresses that I have setup so I know someone is trying to get in. Is there anything else that I can do or that microsoft can do on their end to protect my account further.

Outlook | Web | Outlook.com | Account management, security, and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments
Answer accepted by question author
Anonymous
2020-06-17T10:39:04+00:00

Hello Guys.

Here is what I have done.

Go to account security .

Under More Security options >> Manage sign in option

you can create a new alias and can set that new alias as primary.

By default, our primary alias is our email address.

Once you set the new alias as primary, untick your original email then save it.

Be sure to remember your new alias because that is what you are going to use to log-in.

Don't give your new alias to anyone..  I think our email address remains the same. 

This way, our original email cannot be used to login.

Was this answer helpful?

10+ people found this answer helpful.
0 comments

79 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2020-06-16T02:15:11+00:00

    Hi,

    I am in the same issue with hotmail.

    The other day I was made aware my email and old password was revealed by a data breach. Check https://haveibeenpwned.com/

    To see if your email has been put anywhere hackers and scammers use these logs to target people. 

    Hope it helps

    Was this answer helpful?

    0 comments
  2. Anonymous
    2020-06-15T16:14:32+00:00

    Ok I see that now thanks, XL18!

    Was this answer helpful?

    0 comments
  3. Anonymous
    2020-06-15T15:17:07+00:00

    Hey how were you able to get those source IP addresses, XL18?

    My password reset message doesn't tell me that. This is all I get:

    Microsoft account
    Password reset code
    Please use this code to reset the password for the Microsoft account myemailaddress[at]hotmail.com.
    Here is your code: 6113194
    If you don't recognize the Microsoft account myemailaddress\[at\]hotmail.com, you can <br>click here to remove your email address from that account.
    Thanks,
    The Microsoft account team

    Having the IP address is good because then you can start an abuse complaint with their provider.  For example you should send a report to pssidi[at]hotmail.com who is is the contact for IP address 45.236.241.82 and another one to suporte[at]clickturbo.com.br who is the contact for IP address 170.150.101.205.  By making these reports their ISPs can follow up to ensure that the source devices haven't been infected and performing these password reset attempts under control of a botnet & so can potentially get their devices cleaned which is better for everyone.

    I'd like to do that too, but as you can see my message doesn't contain source IP address for the resets.  Can you let us know how you got those source IP addresses?  Was your password reset code message different and contained them or you got them some other way?

    Please let us know.

    Was this answer helpful?

    0 comments
  4. Anonymous
    2020-06-15T09:07:20+00:00

    Just got another password reset from IP: 45.236.241.82 in Brazil. An unsuccesful attempt but the frequency is too close and one was in the morning IP: 170.150.101.205 also Brazil.

    I am glad the two step authentication is good but letting none original account holders getting attack is a bit hectic and these attempts are getting crazy. This month I have a total of 16 password reset attempts targeted at my account.

    Was this answer helpful?

    0 comments