How to Secure an Outlook Account from Suspicious Sign-In Requests
Question details
The user needs to protect their Outlook account after experiencing repeated, uninitiated Microsoft Authenticator prompts and receiving potentially spoofed emails.

- Product
- Microsoft Outlook
- Device & OS
- not provided
- Scenario
- Receiving unauthorized sign-in attempts, password reset requests from unknown sources, and spoofed emails mimicking the user's own address.
- Observed behavior
- Repeated Microsoft Authenticator prompts appear for sign-ins the user did not initiate, alongside deceptive messages that look like they were sent from the user's email address.
Do not approve any Microsoft Authenticator prompts or sign-in requests that you did not initiate yourself, as this could grant attackers immediate access to your account.
Create a New Alias and Disable Sign-In for the Exposed Email
By creating a new primary alias and disabling sign-in for your current email, attackers won't be able to attempt logins using your known email address, immediately stopping the automated Authenticator prompts.
If an attacker knows your email address, they can repeatedly trigger password reset or sign-in requests. Changing your sign-in preferences removes their target without deleting your email address.
Sign in to your Microsoft account in a web browser, navigate to 'Your info', and click on 'Edit account info'.
Select 'Add email' to create a new alias. Once created, click 'Make primary' next to this newly generated email address.
Scroll to the bottom of the alias page and click 'Change sign-in preferences'.
Uncheck the box next to your old, exposed email address and save your changes. You will now log in using the new alias.

Update Credentials and Review Account Activity
Ensure any unauthorized access is revoked by changing your password, reviewing active sessions, and updating your recovery information.
Need a Secure, Lightweight Office Suite? Try WPS Office
If you are re-evaluating your software setup while securing your Microsoft account, consider WPS Office. It is a powerful, free alternative to Microsoft Office that offers seamless compatibility without the need for expensive subscriptions.
- 1. Download the Installer: Visit the official WPS Office website and click the Free Download button for your operating system.
- 2. Install WPS Office: Run the downloaded installer and follow the on-screen instructions to complete the quick setup.
- 3. Open Your Files: Launch WPS Office and directly open your existing .docx, .xlsx, or .pptx files to continue working immediately.

Frequently Asked Questions
Why am I receiving emails that appear to be sent from my own Outlook address?
This is a common tactic called email spoofing. Scammers forge the 'From' address to make it look like the email came from you, often to trick you into believing your account is hacked. It does not necessarily mean they actually have access to your account.
Will I lose my emails if I disable sign-in for my primary Outlook alias?
No. Disabling sign-in preferences for an alias only prevents people from using that specific email address to log in. You will still receive all emails sent to that address in your standard inbox.
What should I do if I accidentally approved a suspicious Microsoft Authenticator prompt?
Immediately go to your Microsoft account Security settings, change your password, and select 'Sign out everywhere' under the Advanced security options. Review your recent sign-in activity and remove any unrecognized devices.
How do I contact Microsoft Support if I find unauthorized activity?
You can contact support by visiting the official Microsoft Support website, selecting 'Contact Us', and choosing the category for Outlook or Microsoft Account support. From there, you can open a chat with an agent to report the unauthorized access.




