Someone keeps trying to reset my account password

Anonymous

I have received three emails over the last couple of days, on my recovery accounts that I use to get into my microsoft account if I am unable to get into it, with password reset codes. Every time I've gotten one I reset my microsoft password but then I get another one later that same day or the next day. I have two factor authentication turned on, I have the microsoft authenticator app set up for my account, and I get security notifications to my phone. It doesnt appear that whoever is trying to access my account has been successful as there is no recent log in activity in my security settings, that wasnt me, showing that someone was able to successfully get into my account but I am concerned that whoever is trying to get in is going to be successful at some point. When I have received these password reset emails with a reset code in them I have not received any alerts from the authenticator app to approve a log in but I have gotten the password reset code emails to two different account recovery email addresses that I have setup so I know someone is trying to get in. Is there anything else that I can do or that microsoft can do on their end to protect my account further.

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

Answer accepted by question author

Anonymous

Hello Guys.

Here is what I have done.

Go to account security .

Under More Security options >> Manage sign in option

you can create a new alias and can set that new alias as primary.

By default, our primary alias is our email address.

Once you set the new alias as primary, untick your original email then save it.

Be sure to remember your new alias because that is what you are going to use to log-in.

Don't give your new alias to anyone.. I think our email address remains the same.

This way, our original email cannot be used to login.

0 comments

79 additional answers

Anonymous

2020-06-16T08:09:46+00:00

Definitely checked and found to be pwned but password is safe and they also recommend 2FA security. I have other email accounts and checked they are safe. only the current one receiving the resets is pwned. I just hope 2FA will help protect my account for now. On the side note probing frequency has increased to 4 (resets) times today.
Was this answer helpful?

0 comments No comments
Anonymous

2020-06-16T08:05:41+00:00

This has started to happen to me as well. I have had 3 emails in the last couple of days. All my security is up to date but this is not a comfortable feeling that someone is trying!
Was this answer helpful?

0 comments No comments
Anonymous

2020-06-16T05:52:16+00:00

Looks like this is happening to a lot of people, myself included. It just started a few days ago, annoying as heck, but no success breaking in yet, thankfully.
Was this answer helpful?

0 comments No comments
Anonymous

2020-06-16T03:20:35+00:00

It sounds to me like microsoft needs to step up their security when it comes to things like this. The 2fa is effective but I feel like it could go further so that they arent even able to request a password reset without having to enter something else first. I understand that's basically what the 2fa is but it doesnt stop them from being able to still enter your email when clicking the forgot password link. The other issue with this is if you ever actually need to reset your password and need the code that's sent to you you dont know if it's the email you submitted the request for or whoever is trying to get in so someone may inadvertently reset using the malicious one subsequently giving this person access to the account. I just got one again yesterday and just a few minutes ago. It's amazing to me that whoever it is that is doing this really has this much time to annoy people.
Was this answer helpful?

0 comments No comments