Account Security Problems

How to Resolve Microsoft Word Documents Appearing Unexpectedly with the Wrong Author

Huma Ashraf Ch Oct 9, 2026 868 views

Question details

A Microsoft Word document appeared unexpectedly without a filename or saved location, listing the user as the author and containing custom XML data, raising security concerns.

How to Resolve Microsoft Word Documents Appearing Unexpectedly with the Wrong Author

Product: Microsoft Word
Device & OS: not provided
Scenario: The user finds an unsaved, mysterious Word document attributed to them and suspects unauthorized access to their device or Microsoft account.
Observed behavior: An unexpected Word document appears with no filename or save location, lists the user as the author, and contains suspicious custom XML data.

Before you start

Before making changes, do not delete the unexpected document immediately. Save a copy of the file and note the time it appeared, as this information may be useful for forensic analysis or reporting.

Solution 1Recommended

Secure Your Microsoft and Local Accounts

Take immediate action to prevent unauthorized access by changing passwords and enabling multi-factor authentication (MFA).

If a document was created under your profile without your knowledge, someone may have gained access to your Microsoft account or your local machine.

Change Your Microsoft Password

Log in to your Microsoft account online, navigate to the Security tab, and select 'Change password' to establish a strong, new credential.

Update Local and OneDrive Passwords

Change your Windows login password via Settings > Accounts > Sign-in options. Ensure your OneDrive account uses your newly updated Microsoft credentials.

Enable Two-Factor Authentication (2FA)

In your Microsoft account's Security settings, go to 'Advanced security options' and turn on Two-step verification to require an extra code when signing in.

Secure Your Microsoft and Local Accounts

Account Syncing Behavior: If you use OneDrive, a file created by an unauthorized person on another compromised device might automatically sync and appear on your local computer.

Solution 2

Scan Your Device for Malware and Remote Access Software

Identify and remove any malicious software that might be allowing remote access to your computer.

Solution 3

Preserve Evidence and Report the Incident

Keep logs and the document intact in case you need to report the unauthorized access to IT support or authorities.

Free Microsoft Office alternative

Switch to WPS Office for a Secure and Lightweight Document Experience

If you are concerned about Microsoft Word account syncing issues or looking for a more streamlined, secure local document editor, WPS Office is an excellent free alternative. It provides robust offline file management and high compatibility without forcing automatic cloud synchronization.

1. Download WPS Office: Visit the official WPS website and download the free installation package.
2. Install the Software: Run the installer and follow the on-screen instructions to set up WPS Office securely on your device.
3. Open Your Documents: Launch WPS Writer and open your existing .docx files to continue working with full formatting compatibility.

Highly compatible with Microsoft Word (.docx), Excel, and PowerPoint formats.Strong local file encryption and password protection features for enhanced document security.Lightweight installation that doesn't run unnecessary background syncing processes.Familiar user interface makes migration seamless and easy.

microsoft office alternative - wps office

Frequently Asked Questions

Why does a Word document show my name as the author if I didn't create it?

Word automatically pulls the author name from the Microsoft account or local Office profile currently signed in. If someone else accesses your device or your cloud account, any files they create will automatically display your name in the author metadata.

What is custom XML data in a Word document?

Custom XML data is often used to store structured information, metadata, or integrations within a document. While legitimate templates use it frequently, unexpected XML data in a mysterious file could indicate automated scripts or malicious activity trying to exploit software vulnerabilities.

Can someone remotely create a Word document on my computer?

Yes, if your computer is compromised by remote access software (like hidden remote desktop tools), or if a synchronized cloud folder (like OneDrive) is accessed from a different, compromised device. Any files created remotely in a synced folder will automatically download to your local machine.

Microsoft Office Security Issues