I get a few 2FA notifications from Canada daily using my hotmail.com ... how to stop?

Arian Hojat 20 Reputation points
2026-02-25T23:39:11.66+00:00

I changed my password to a more complex one to no avail...
Then i went passwordless as MS Support recommended that.

There was an option to sign out of all devices. I tried that.
What else is there to do? i still get these 2FA popups on my phone that are coming from "Canada on Windows". I live in the US so i know these are hackers.

Note: the "Recent activity" page (https://account.live.com/Activity?mkt=en-US&refd=account.microsoft.com&refp=security) never lists failure logins it seems as i never see the Canada requests in there. i only see my successful logins from the US there.

Thanks!

Outlook | Web | Outlook.com | Email

Answer accepted by question author
Hornblower409 14,915 Reputation points
2026-02-27T15:41:12.8066667+00:00

Login Only Alias

You create a new "secret" alias that only you know. You use it ONLY to logon to your account. Then you remove the Sign-In privilege from your existing email alias so it can not be used to logon to your account but can still be used to send and receive email. Now, if all the Bad Guys have is your old alias, they get "We couldn't find a Microsoft account ..." at the very first step of the logon process and can not continue.

 1 -- Create a new Log In Only (LIO) alias.
https://account.live.com/AddAssocId
e.g. "JohnDoe.LIO@..."
Write it down! If you forget your LIO alias you will be locked out!

(If you get an error "There's a temporary problem with the service ..." try using a Incognito/Private browser session).

 2 -- Make the LIO alias your Primary Alias.
https://account.live.com/names/manage
Do NOT "Remove" anything!

 3 -- Log out of your account.
Click on your Initials/Profile Picture at the top right and choose "Sign out"

 4 -- Verify that you can login using the new LIO alias.
https://login.live.com/

 5 -- Uncheck the Sign-in privilege from your old alias.
https://account.live.com/SignInPreferences
It's now an Email Only (EMO) alias.

 6 -- Log out of your account.
Click on your Initials/Profile Picture at the top right and choose "Sign out"

 7 -- Verify that you can NOT login using your old EMO alias.
https://login.live.com/
You should see "We couldn't find a Microsoft account_"

8 -- Change your default "Send From" in Outlook to your EMO alias.
https://outlook.live.com/mail/options/mail/forwarding
If you see a [Sign in] button - do it.
Email aliases -> Set default From address
Select your Email Only (EMO) alias.

Notes:

Leakage

  • Meeting invites you send still come "From" the Primary alias and there is no way to change it.
  • Meeting RSVPs (when you Accept/Decline/Tentative a meeting invite) still come "From" the Primary alias regardless of which alias the invite was sent to.

Limits

Primary Alias Changes 

  • Microsoft limits primary alias changes to twice per week and 10 times per year to prevent security abuse. If you recently added a new alias, you may also face a mandatory 48-hour to 7-day cooldown before you can set it as your primary.

Alias Creation 

  • Microsoft limits personal account alias creation to prevent abuse. You can only create up to 2 new aliases every 7 days. Additionally, you are restricted to a rolling annual maximum of 10 new aliases and a total of 10 active aliases on your account at any given time.

Was this answer helpful?

8 people found this answer helpful.

1 additional answer

Sort by: Newest
  1. Jeronimo Fuerte 45,760 Reputation points Independent Advisor
    2026-02-26T00:14:42.4566667+00:00

    Hi! Sorry to hear about this. Additionally, you can try changing the sign-in alias for your Microsoft account. You can manage which aliases are allowed to sign in here: https://account.live.com/SignInPreferences

    If you don’t currently have another alias available, you can add a new one here: https://account.live.com/names/manage

    I recommend not deleting your current alias, just add the new one and set it as the preferred sign-in. This can help improve account security, especially if your email address has been exposed publicly.

    Was this answer helpful?

    0 comments No comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.