Suspicious Login Issues

How to Protect Your Microsoft Account from Repeated Hacking Attempts

Maira Mehtab Sep 22, 2026 869 views

Question details

The user is receiving frequent and unsolicited password-reset emails, indicating unauthorized individuals are repeatedly attempting to hack into their Microsoft account.

Product: Microsoft Account
Device & OS: not provided
Scenario: Receiving unauthorized password-reset emails and suspicious sign-in notifications.
Observed behavior: Someone is repeatedly triggering password resets or login attempts to gain unauthorized access to the user's account.

Before you start

Ensure you are logging in from a trusted device and only use the official Microsoft website to review your account security settings. Never click on any links inside suspicious password-reset emails.

Solution 1Recommended

Update Security Settings and Enable Multi-Factor Authentication

The most effective way to stop hacking attempts is to update your password, enforce an extra layer of security via MFA, and monitor your account activity.

When hackers obtain your email address from third-party data breaches, they often use automated scripts to spam login attempts or request password resets. By securing your authentication methods, you render these attempts harmless.

Change Your Password

Navigate to the official Microsoft Account Security page, select 'Password security,' and create a strong, unique password that you have not used on any other website.

Enable Two-Step Verification (MFA)

In the advanced security options, turn on 'Two-step verification'. It is highly recommended to download the Microsoft Authenticator app on your mobile device for secure, prompt-based approvals.

Review Sign-in Activity

Click on 'Sign-in activity' in your security dashboard to view recent logins. If you spot unfamiliar devices, IP addresses, or locations, flag them as 'This wasn't me' to alert Microsoft.

Ignore Unfamiliar Prompts

Deny any MFA authentication prompts or password-reset emails that you did not explicitly initiate yourself. Do not interact with the links inside these emails.

Phishing Warning: Never click links in unexpected password-reset emails. They are often phishing attempts designed to steal your current credentials.

Free Microsoft Office alternative

Switch to WPS Office for a Secure, Hassle-Free Experience

Tired of dealing with complex Microsoft account security issues, constant logins, and expensive subscriptions? WPS Office offers a free, lightweight, and powerful alternative. You can work securely offline or with your preferred cloud storage, without being forced into a single ecosystem.

1. Download WPS Office: Visit the official WPS website and download the free installer for Windows, Mac, or Linux.
2. Install and Launch: Run the installation file and open the WPS Office suite on your device.
3. Open Your Files: Drag and drop your existing Microsoft Office files into WPS; they will open seamlessly with perfect formatting.

Highly compatible with Microsoft Office formats (.docx, .xlsx, .pptx)Free and lightweight alternative to Microsoft 365Familiar user interface for a seamless transitionSecure offline editing capabilities to keep your data local

microsoft office alternative - wps office

Frequently Asked Questions

Why do I keep getting Microsoft single-use code emails?

This happens when someone knows your email address and is trying to guess your password or use the 'Forgot Password' feature. As long as they don't have access to the code or your actual password, your account remains secure.

Can I stop someone from trying to log into my Microsoft account?

Yes, you can change your sign-in preferences. Add a new alias (a new email address) to your Microsoft account, make it your primary alias, and then disable sign-in privileges for your original email address in the 'Sign-in preferences' menu.

What should I do if I accidentally approved an unfamiliar sign-in request?

Immediately go to your Microsoft account security page, select 'Sign out everywhere', change your password, and verify that your recovery email and phone number have not been altered by the attacker.

Microsoft Office Security Issues