logo
search
Account Security Problems

How to Secure OneDrive After an Unknown Photos Folder Appears

Guest WriterGuest Writer Oct 7, 2026 869 views

Question details

The user discovered an unfamiliar folder containing photos or videos in their OneDrive account and needs to secure the account against unauthorized access or accidental sharing.

How to Secure Your OneDrive Account After an Unknown Photos Folder Appears
Product
Microsoft OneDrive
Device & OS
not provided
Scenario
Securing cloud storage and reviewing account permissions after finding unexpected files.
Observed behavior
An unknown folder with media files appears in OneDrive, which could indicate accidental sharing, a rogue third-party application, or a compromised Microsoft account.
Before you start

Do not open any files or click on links within the unfamiliar folder, as they may contain malicious content. Ensure you are signed in to your Microsoft account on a trusted, secure device before making security modifications.

Solution 1Recommended

Lock Down Your Microsoft Account and Enable MFA

Take immediate action to secure your Microsoft account by enabling two-factor authentication, reviewing recent sign-ins, and revoking unauthorized app permissions.

Simply changing your Microsoft account password is not always enough to remove existing access. If a third-party app or active session is compromised, you must manually revoke those permissions and enable multi-factor authentication (MFA) to fully secure your data.

1
Enable Two-Factor Authentication

Sign in to your Microsoft account dashboard. Navigate to the 'Security' tab, select 'Advanced security options', and follow the prompts to turn on Two-step verification.

2
Review Recent Sign-in Activity

While in the Security dashboard, click on 'Sign-in activity'. Look for any unfamiliar locations, devices, or IP addresses that have successfully accessed your account.

3
Revoke Unrecognized App Permissions

Scroll down in the Security dashboard to find 'Apps and services you've given access'. Review the list and click 'Remove these permissions' for any application you do not recognize or no longer use.

Lock Down Your Microsoft Account and Enable MFA
Account Secured: Enabling two-step verification ensures that even if someone has your password, they cannot access your OneDrive without your secondary approval.
Free Microsoft Office alternative

Try WPS Office for Secure and Lightweight Document Management

If you are concerned about cloud security or looking for a fast, reliable, and secure alternative to Microsoft Office, consider WPS Office. It provides robust local and cloud document management with full format compatibility.

  1. 1. Download the Installer: Visit the official WPS website and click the free download button for your operating system.
  2. 2. Install WPS Office: Run the downloaded setup file and follow the quick installation prompts on your screen.
  3. 3. Manage Documents Securely: Open WPS Office to instantly view, edit, and securely save your documents locally or to WPS Cloud.
Completely free, lightweight, and highly secure for personal useFully compatible with Microsoft Word, Excel, and PowerPoint formatsProvides built-in, secure cloud storage options to protect your documentsFamiliar user interface allows for a seamless and quick migration
QA img-9

Frequently Asked Questions

Why did a random photos folder appear in my OneDrive?

An unknown folder can appear if someone accidentally shared a folder with your email address, if a third-party app (like a connected gallery app on a smartphone) synced media to your cloud, or if your account has been compromised.

Is changing my Microsoft account password enough to stop unauthorized access?

No. Changing your password does not automatically revoke access from third-party applications or devices that are already logged in via security tokens. You must manually revoke app permissions and enable two-factor authentication.

How can I tell if someone else is using my OneDrive account?

You can verify unauthorized access by visiting the 'Sign-in activity' page in your Microsoft account Security settings. This page displays the times, locations, and IP addresses of all recent successful and unsuccessful sign-in attempts.