Someone keeps trying to reset my account password

Anonymous
2020-06-12T12:16:44+00:00

I have received three emails over the last couple of days, on my recovery accounts that I use to get into my microsoft account if I am unable to get into it, with password reset codes. Every time I've gotten one I reset my microsoft password but then I get another one later that same day or the next day. I have two factor authentication turned on, I have the microsoft authenticator app set up for my account, and I get security notifications to my phone. It doesnt appear that whoever is trying to access my account has been successful as there is no recent log in activity in my security settings, that wasnt me, showing that someone was able to successfully get into my account but I am concerned that whoever is trying to get in is going to be successful at some point. When I have received these password reset emails with a reset code in them I have not received any alerts from the authenticator app to approve a log in but I have gotten the password reset code emails to two different account recovery email addresses that I have setup so I know someone is trying to get in. Is there anything else that I can do or that microsoft can do on their end to protect my account further.

Outlook | Web | Outlook.com | Account management, security, and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments
Answer accepted by question author
Anonymous
2020-06-17T10:39:04+00:00

Hello Guys.

Here is what I have done.

Go to account security .

Under More Security options >> Manage sign in option

you can create a new alias and can set that new alias as primary.

By default, our primary alias is our email address.

Once you set the new alias as primary, untick your original email then save it.

Be sure to remember your new alias because that is what you are going to use to log-in.

Don't give your new alias to anyone..  I think our email address remains the same. 

This way, our original email cannot be used to login.

Was this answer helpful?

10+ people found this answer helpful.
0 comments

79 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2020-06-17T12:12:25+00:00

    That's what I did as well. No password-reset emails since then.

    Was this answer helpful?

    0 comments
  2. Anonymous
    2020-06-17T11:56:09+00:00

    That's actually a great find. I didnt realize microsoft had an option in place to create aliases. That is assuming emails sent to our current email addresses will still go through and it's still useable so existing accounts that use the current email and not the alias dont need to be all reset to a new email especially when I'm sure some of us use the original email to pay bills and other important things. This works for exchange accounts because we do it all the time where I work when people change positions and would have an address with a different domain but still need to get emails from their old address for a period of time. Great suggestion!

    Was this answer helpful?

    0 comments
  3. Anonymous
    2020-06-17T08:21:12+00:00

    My gmail email address is a duplicate of my hotmail email address. I'm going to set my recovery email to something new and see if it stops. You guys might be onto something.

    I suspect it could be because our emails are basic first name + last name @ email. 

    I assume bots use easy to guess emails, cracking software, any IP switching tools, and they’re exploiting the fact Microsoft might not implementing a Captcha for the forgot password page! That is a very easy bot to create, this needs to be added asap !

    Was this answer helpful?

    0 comments
  4. Deleted

    This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

    Comments have been turned off. Learn more