How to Fix Unrequested Microsoft Password Reset Codes
Question details
The user is continuously receiving password reset codes for their account without requesting them and wants to know the cause and how to stop it.
- Product
- Microsoft Account
- Device & OS
- not provided
- Scenario
- Checking email or mobile messages and noticing multiple unsolicited verification codes.
- Observed behavior
- Repeated password reset codes are sent to the user's email or mobile device without any password reset prompt initiated by the user.
Do not share the received reset codes with anyone, and ensure the messages are genuinely from Microsoft before clicking any links.
Review Recent Activity and Secure Your Account
Check your Microsoft account's recent sign-in activity to identify unauthorized access attempts and apply enhanced security measures.
Repeated reset codes usually mean someone is either entering your email by mistake or actively trying to breach your account. It is crucial to verify your account activity and lock down your credentials.
Log in to your Microsoft account and navigate to the 'Security' tab. Click on 'Sign-in activity' to review recent logins, devices, and locations for any unfamiliar entries.
If you notice unfamiliar activity, click on 'Password security' and immediately change your password. Use a strong, unique password that you haven't used on other websites.
In the 'Advanced security options' menu, turn on 'Two-Step Verification'. Follow the on-screen instructions to add an authenticator app or phone number, preventing attackers from accessing your account even if they guess your password.
Try WPS Office for a Secure and Lightweight Experience
If you are tired of managing complex Microsoft accounts and frequent security prompts, consider switching to WPS Office. It provides a secure, lightweight, and free alternative with excellent format compatibility for all your document needs.

Frequently Asked Questions
What should I do if I accidentally shared the reset code?
Immediately log into your Microsoft account, change your password, and select the option to sign out of all active sessions in your advanced security settings.
Can someone access my account with just my email address?
No, an attacker needs your password or access to your secondary verification methods (like your phone or recovery email) to successfully log in.
How can I stop someone from mistyping my email?
You cannot prevent users from mistyping their emails, but you can create a new primary alias for logging in and disable login permissions for the email address that is receiving the spam codes.




