Can You Restrict Microsoft Account Sign-Ins by Geographic Location?
Question details
The user wants to know if there is a way to block or restrict sign-in attempts to their Microsoft account based on specific geographic locations or countries.

- Product
- Microsoft Account
- Device & OS
- not provided
- Scenario
- Securing a personal account against frequent unauthorized international login attempts.
- Observed behavior
- Users experience repeated unsuccessful sign-in attempts and authenticator prompts from unfamiliar countries, but cannot find a built-in geo-blocking feature for personal accounts.
Before modifying your security settings, ensure you have access to your current Microsoft account recovery email or phone number in case you need to verify your identity.
Implement Alternative Security Measures for Your Microsoft Account
Since Microsoft personal accounts currently do not support country-based sign-in restrictions, you must rely on strong alternative security settings to protect your data.
At present, Microsoft does not offer a native feature for personal accounts to whitelist or blacklist specific countries for sign-ins. To safeguard your account from international brute-force attacks and unauthorized access, it is crucial to maximize the existing security protocols provided by Microsoft.
Navigate to the Security basics page of your Microsoft account, select 'Advanced security options', and turn on two-step verification (2FA) to require an additional code or prompt when signing in.
If you use the Microsoft Authenticator app, strictly ignore and deny any unexpected approval requests that you did not initiate yourself.
Update your account with a strong, complex password that you have never used for any other online service or website.
Regularly check the 'Recent activity' page in your Microsoft account settings to monitor where and when sign-in attempts are occurring, and verify that no unauthorized logins were successful.

Looking for a Secure and Free Alternative to Microsoft Office?
If you are reconsidering your cloud data storage and office suite options due to account security concerns, try WPS Office. It provides a lightweight, highly compatible, and secure offline environment for your documents without mandatory cloud syncing or hefty subscription fees.
- 1. Download the Installer: Visit the official WPS Office website and download the free installer for your operating system.
- 2. Install WPS Office: Run the setup file and follow the on-screen instructions to quickly install the software.
- 3. Open Your Documents: Launch WPS Office and instantly open your existing Word, Excel, or PowerPoint files without losing any formatting.

Frequently Asked Questions
Why am I getting sign-in attempts from countries I have never visited?
Your email address may have been exposed in a third-party data breach, leading automated bots to attempt credential stuffing or brute-force logins from various global servers using leaked databases.
Can Microsoft 365 business accounts restrict sign-ins by country?
Yes, unlike personal accounts, Microsoft 365 Enterprise and Business accounts can use Microsoft Entra ID (formerly Azure Active Directory) Conditional Access policies to block or allow sign-ins from specific geographic locations.
What should I do if I accidentally approve a fraudulent Authenticator prompt?
Immediately go to your Microsoft account security settings, select 'Sign out everywhere', change your password, and review your account recovery methods to ensure the attacker has not added their own.
Does changing my account alias stop foreign sign-in attempts?
Yes. Creating a new primary alias and disabling sign-in preferences for your old, leaked email address can effectively stop bots from attempting to log in, as they will no longer be able to use the exposed address for access.




