Someone keeps trying to reset my account password

Anonymous
2020-06-12T12:16:44+00:00

I have received three emails over the last couple of days, on my recovery accounts that I use to get into my microsoft account if I am unable to get into it, with password reset codes. Every time I've gotten one I reset my microsoft password but then I get another one later that same day or the next day. I have two factor authentication turned on, I have the microsoft authenticator app set up for my account, and I get security notifications to my phone. It doesnt appear that whoever is trying to access my account has been successful as there is no recent log in activity in my security settings, that wasnt me, showing that someone was able to successfully get into my account but I am concerned that whoever is trying to get in is going to be successful at some point. When I have received these password reset emails with a reset code in them I have not received any alerts from the authenticator app to approve a log in but I have gotten the password reset code emails to two different account recovery email addresses that I have setup so I know someone is trying to get in. Is there anything else that I can do or that microsoft can do on their end to protect my account further.

Outlook | Web | Outlook.com | Account management, security, and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments
Answer accepted by question author
Anonymous
2020-06-17T10:39:04+00:00

Hello Guys.

Here is what I have done.

Go to account security .

Under More Security options >> Manage sign in option

you can create a new alias and can set that new alias as primary.

By default, our primary alias is our email address.

Once you set the new alias as primary, untick your original email then save it.

Be sure to remember your new alias because that is what you are going to use to log-in.

Don't give your new alias to anyone..  I think our email address remains the same. 

This way, our original email cannot be used to login.

Was this answer helpful?

10+ people found this answer helpful.
0 comments

79 additional answers

Sort by: Oldest
Most helpful Newest Oldest
  1. Anonymous
    2020-06-16T15:16:20+00:00

    Probably not if you have a 2FA security on and there might be a bot doing this thus we hope microsoft will investigate this sometime soon.

    Was this answer helpful?

    0 comments
  2. Anonymous
    2020-06-16T15:22:26+00:00

    Password that i have is strong for now and there are other securities in check in my PCs. Plus I found out where my email and old passwords from years and years ago were compromised as i had already implemented new passwords. There were a few sites that were shut down and they did not protect their clients information and was leaked from there.

    The only thing that annoys me is the constant emails notifying me that someone is probing my account for weaknesses. Can't exactly shut down the notifications as i need to know if they are successful or something amidst might occur. We will see how things turns out as this only happens recently starting around May. This month June is the worst frequent scratching at the door. even though they can't get in yet and I hope they won't with the securities in place.

    Was this answer helpful?

    0 comments
  3. Anonymous
    2020-06-16T15:32:44+00:00

    I notice i'm not the only one with this problem. I have this for over two/three weeks and set on random times. 

    Then it made me wondering... how easy is it to ask for an password reset?

    So I took these steps:

    1. Try to sign in with emailadress, click next
    2. Click "forgot your password?" 
    3. Click " Use a different verification option" 
    4. Select email to *********@hotmail.com
    5. Fill in requested email 
    6. Then it says: Verify your identity

    If *********@hotmail.com matches the email address for your account, we'll send you a code.

    These steps are easily scripted and should be protected with a system that verifies if these steps have been done by a human. Please take this in consideration to make it at least a bit harder to do these steps this way we can minimize the spam.

    It is also easily with these steps in case of Forgotten username:

    1. Clicked on Login options
    2. Selected Forgot my username
    3. Entered alternate email address, clicked next
    4. And then it asked me for the new code.

    Was this answer helpful?

    0 comments
  4. Anonymous
    2020-06-16T17:06:14+00:00

    Same issue here, getting spammed to death with the same e-mails. Received at least 20 in the last few days. I have 2FA enabled so I guess I should be fine, but it sure is annoying.

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments