Does "Successful sign-in" mean the hacker bypassed my Gmail 2FA code?

Question

Does "Successful sign-in" mean the hacker bypassed my Gmail 2FA code?

vu hai dao 40

Hi Microsoft Community,My account security history recently showed a "Successful sign-in" from an unknown location (USA), followed by "Unusual activity resolved".My Microsoft account is strictly set up to require a Gmail verification code for every login attempt.Some people told me that "Successful sign-in" only means the hacker entered the correct password and got stuck at the Gmail 2FA screen. However, others say the hacker actually bypassed the 2FA and got full access to my account.Could a Microsoft expert please clarify: Does "Successful sign-in" mean the hacker only guessed the password, or does it mean they successfully entered the Gmail code and fully accessed my account before the system blocked them?Thank you!

0 comments

Answer accepted by question author

0 additional answers

Your answer

Answer 1

Success sign in here means they actually got into your account.

If they only entered the correct password it would say unsuccessful sign in and details would say “request denied”.

2FA can be passed here for two possibilities

Your Gmail is also compromised. They couls accesss your code and then delete that email.
They stole what’s called a token session. Usually through unsafe link you clicked on and then allowed them to steal your token session, so their device can be seen as trusted and already authorized.

I will strongly recommend that you change your password and set up passkey instead for 2FA.