logo
search
Suspicious Login Issues

How to Secure an Outlook Account from Suspicious Sign-In Requests

Huma Ashraf ChHuma Ashraf Ch Sep 29, 2026 869 views

Question details

The user needs to protect their Outlook account after experiencing repeated, uninitiated Microsoft Authenticator prompts and receiving potentially spoofed emails.

How to Secure an Outlook Account from Suspicious Sign-In Requests
Product
Microsoft Outlook
Device & OS
not provided
Scenario
Receiving unauthorized sign-in attempts, password reset requests from unknown sources, and spoofed emails mimicking the user's own address.
Observed behavior
Repeated Microsoft Authenticator prompts appear for sign-ins the user did not initiate, alongside deceptive messages that look like they were sent from the user's email address.
Before you start

Do not approve any Microsoft Authenticator prompts or sign-in requests that you did not initiate yourself, as this could grant attackers immediate access to your account.

Solution 1Recommended

Create a New Alias and Disable Sign-In for the Exposed Email

By creating a new primary alias and disabling sign-in for your current email, attackers won't be able to attempt logins using your known email address, immediately stopping the automated Authenticator prompts.

If an attacker knows your email address, they can repeatedly trigger password reset or sign-in requests. Changing your sign-in preferences removes their target without deleting your email address.

1
Access Account Information

Sign in to your Microsoft account in a web browser, navigate to 'Your info', and click on 'Edit account info'.

2
Add a New Alias

Select 'Add email' to create a new alias. Once created, click 'Make primary' next to this newly generated email address.

3
Change Sign-in Preferences

Scroll to the bottom of the alias page and click 'Change sign-in preferences'.

4
Disable the Old Alias for Login

Uncheck the box next to your old, exposed email address and save your changes. You will now log in using the new alias.

Create a New Alias and Disable Sign-In for the Exposed Email
Email Delivery Remains Unaffected: Disabling sign-in for an alias does not delete the address. You will still continue to receive all emails sent to your original Outlook address in your inbox.
Free Microsoft Office alternative

Need a Secure, Lightweight Office Suite? Try WPS Office

If you are re-evaluating your software setup while securing your Microsoft account, consider WPS Office. It is a powerful, free alternative to Microsoft Office that offers seamless compatibility without the need for expensive subscriptions.

  1. 1. Download the Installer: Visit the official WPS Office website and click the Free Download button for your operating system.
  2. 2. Install WPS Office: Run the downloaded installer and follow the on-screen instructions to complete the quick setup.
  3. 3. Open Your Files: Launch WPS Office and directly open your existing .docx, .xlsx, or .pptx files to continue working immediately.
Fully compatible with Microsoft Word, Excel, and PowerPoint formats, ensuring seamless file sharing.Lightweight software that installs quickly and runs smoothly even on older devices.Familiar, tabbed user interface that makes switching from Microsoft Office completely effortless.Built-in PDF tools for reading, editing, and converting secure documents offline.
QA img-9

Frequently Asked Questions

Why am I receiving emails that appear to be sent from my own Outlook address?

This is a common tactic called email spoofing. Scammers forge the 'From' address to make it look like the email came from you, often to trick you into believing your account is hacked. It does not necessarily mean they actually have access to your account.

Will I lose my emails if I disable sign-in for my primary Outlook alias?

No. Disabling sign-in preferences for an alias only prevents people from using that specific email address to log in. You will still receive all emails sent to that address in your standard inbox.

What should I do if I accidentally approved a suspicious Microsoft Authenticator prompt?

Immediately go to your Microsoft account Security settings, change your password, and select 'Sign out everywhere' under the Advanced security options. Review your recent sign-in activity and remove any unrecognized devices.

How do I contact Microsoft Support if I find unauthorized activity?

You can contact support by visiting the official Microsoft Support website, selecting 'Contact Us', and choosing the category for Outlook or Microsoft Account support. From there, you can open a chat with an agent to report the unauthorized access.