Someone keeps trying to reset my account password

Anonymous

I have received three emails over the last couple of days, on my recovery accounts that I use to get into my microsoft account if I am unable to get into it, with password reset codes. Every time I've gotten one I reset my microsoft password but then I get another one later that same day or the next day. I have two factor authentication turned on, I have the microsoft authenticator app set up for my account, and I get security notifications to my phone. It doesnt appear that whoever is trying to access my account has been successful as there is no recent log in activity in my security settings, that wasnt me, showing that someone was able to successfully get into my account but I am concerned that whoever is trying to get in is going to be successful at some point. When I have received these password reset emails with a reset code in them I have not received any alerts from the authenticator app to approve a log in but I have gotten the password reset code emails to two different account recovery email addresses that I have setup so I know someone is trying to get in. Is there anything else that I can do or that microsoft can do on their end to protect my account further.

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

Answer accepted by question author

Anonymous

Hello Guys.

Here is what I have done.

Go to account security .

Under More Security options >> Manage sign in option

you can create a new alias and can set that new alias as primary.

By default, our primary alias is our email address.

Once you set the new alias as primary, untick your original email then save it.

Be sure to remember your new alias because that is what you are going to use to log-in.

Don't give your new alias to anyone.. I think our email address remains the same.

This way, our original email cannot be used to login.

0 comments

79 additional answers

Anonymous

2020-06-19T01:30:20+00:00

If anyone is still getting these reset emails definitely make the new alias. I did it and they have stopped cold.
Was this answer helpful?

0 comments No comments
Anonymous

2020-06-19T14:23:41+00:00

Changing the alias for login definitely helps a lot now. Hope they won't figure out in the mean time and harass us again.
Was this answer helpful?

0 comments No comments
Anonymous

2020-06-20T05:08:54+00:00

Been having the same issue. I've looked at my 'Recent Activity' section which goes as far back as the 11th June 2020 as the first attempt to log into my account, but according to my attached Gmail account which I use as backup the first attempt was on June 7th. Most of the attempts stem from China, while some are from Thailand and Mexico. Probably all bogus, though there have been over 11 attempts so far, the latest being yesterday when I decided to do something about it.

I'd also like to add that it says 'Unsuccessful sync' as opposed to 'Incorrect Password Entered'. Anyone know what this means?

Here's one of them:

'ProtocolIMAP

IP: 240e:360:6e00:730a:f86f:be9b:f64e:976d

Account alias:

*** Email address is removed for privacy ***

Time16/06/2020 22:31

Approximate location: China

Type: Unsuccessful sync

My account has had these attempts since June 11th as well, it seems most of the people have seen this occur within the past week or so. Let's hope Microsoft can get a fix in place soon.
Was this answer helpful?

0 comments No comments
Anonymous

2020-06-20T05:11:31+00:00

I also had my Spotify account compromised which used the same email as my hotmail. I already reset it and nothing was connected to it. Spotify doesnt support 2FA so it sucks.

A food delivery app I use was hacked and had an unauthorized charge a few hours prior to when these attempts on my Microsoft account started.
Was this answer helpful?

0 comments No comments