logo
search
Account Security Problems

Fix Unknown Photos in OneDrive and Secure Your Account

Nimra MalikNimra Malik Oct 10, 2026 871 views

Question details

The user is finding unexpected photos, images, or business icons in their OneDrive and needs to determine if their account is compromised and how to properly secure it.

How to Secure Your Account When Unknown Photos Appear in OneDrive
Product
OneDrive
Device & OS
not provided
Scenario
Reviewing cloud storage contents and discovering unrecognized image files that were not manually uploaded.
Observed behavior
Unexpected files, such as unknown photos or business icons, are synchronizing to the user's OneDrive account, indicating potential unauthorized access or an unintended folder backup.
Before you start

Before making any changes, temporarily pause OneDrive syncing on your current device to prevent potentially malicious files from downloading locally while you investigate.

Solution 1Recommended

Secure Your Microsoft Account and Devices

Take immediate action to lock down your Microsoft account and scan connected devices to eliminate unauthorized access.

If you suspect someone else has access to your account, you must secure your login credentials and verify the integrity of the devices connected to your cloud storage.

1
Change your password

Navigate to the Microsoft account security page and select 'Change password'. Create a strong, unique password that you have never used before.

2
Review recent activity

Click on 'Sign-in activity' in your account settings to look for unrecognized locations, devices, or IP addresses.

3
Update security information

Verify your recovery email and phone number. Remove any connected services or applications that you do not recognize under the 'Apps and services' tab.

4
Scan devices for malware

Run a full system scan using Windows Defender or your preferred antivirus software on every device synchronized with your OneDrive.

Secure Your Microsoft Account and Devices
Enable Two-Factor Authentication: For maximum security, enable two-step verification (MFA) on your account. This prevents unauthorized sign-ins even if your password becomes compromised in the future.
Free Microsoft Office alternative

Need a Secure and Reliable Office Alternative?

If you are concerned about account security or simply looking for a cost-effective productivity suite, WPS Office provides a robust, lightweight, and secure alternative. It seamlessly handles local files and integrates with secure cloud options to give you full control over your documents.

  1. 1. Download the software: Visit the official WPS website and download the free WPS Office installer for your operating system.
  2. 2. Install the suite: Run the setup file and follow the simple on-screen instructions to complete the lightweight installation.
  3. 3. Secure your documents: Open WPS Office, create or import your existing Microsoft Office files, and save them securely to your preferred local hard drive or trusted cloud storage.
100% compatible with Microsoft Office file formats (Word, Excel, PowerPoint)Lightweight installation with a user-friendly, familiar interfaceBuilt-in secure document encryption and local saving optionsFree to use without forcing mandatory cloud synchronization
microsoft office alternative - wps office

Frequently Asked Questions

Why are random app icons showing up in my OneDrive?

Often, mobile devices or certain software automatically back up app data folders to OneDrive. Check your device's backup settings and exclude folders that contain app caches or non-essential assets.

Can someone else upload files to my OneDrive without my password?

Yes, if you have shared a folder with editing permissions, others can upload files to it. Review your 'Shared' tab in OneDrive and manage access permissions to verify who can upload files to your account.

What should I do if I cannot log into my account to change the password?

Use the Microsoft account recovery form immediately to regain access. Provide as much accurate information as possible to verify your identity, and once recovered, set up two-factor authentication.