logo
search
Account Security Problems

How to Secure Your Microsoft Account After Sharing a Verification Code

Aamir Naveed AkramAamir Naveed Akram Sep 30, 2026 869 views

Question details

The user needs to secure their Microsoft account and ensure no unauthorized access remains after sharing a verification code with a third-party seller.

Secure Your Microsoft Account After Sharing a Verification Code
Product
Microsoft Account
Device & OS
not provided
Scenario
The user shared a verification code with a seller to purchase a game and wants to revoke any potential access or sign-in tokens the seller might have acquired.
Observed behavior
The seller accessed the account using the shared code, raising concerns about ongoing unauthorized access or retained sign-in tokens.
Before you start

Ensure you have access to your primary email or phone number associated with the account, and log in from a trusted personal device before making these security changes.

Solution 1Recommended

Reset Password and Force Sign Out Everywhere

The most critical step is to immediately change your password and invalidate all active login sessions to ensure the seller cannot retain access.

Simply changing your password may not immediately terminate active sign-in tokens that the seller might hold. Using the 'Sign out everywhere' feature forces all devices to re-authenticate.

1
Change your password

Log in to your Microsoft account security dashboard, select 'Password security' or 'Change my password,' and create a strong, unique password.

2
Sign out everywhere

On the security dashboard, navigate to 'Advanced security options' and click on 'Sign me out everywhere' to invalidate all active tokens and sessions.

3
Enable two-step verification

Under 'Advanced security options,' turn on two-step verification (2FA) and link it to the Microsoft Authenticator app for the highest level of security.

Reset Password and Force Sign Out Everywhere
Security Best Practice: Never share verification codes or account credentials with sellers or other third parties, as this bypasses Microsoft's primary security measures.
Free Microsoft Office alternative

Try WPS Office for a Secure and Free Productivity Experience

If you are managing Microsoft account security issues and want a hassle-free, secure way to work on your documents offline, consider switching to WPS Office. It provides a lightweight, highly compatible, and free alternative to Microsoft Office, ensuring your local documents remain private without relying on complex cloud account subscriptions.

  1. 1. Download the software: Visit the official WPS Office website and download the free installer for your operating system.
  2. 2. Install WPS Office: Run the installer and follow the simple on-screen instructions to set up the software on your device.
  3. 3. Open your files securely: Launch WPS Office and instantly open your existing Microsoft Office documents locally without requiring online account verification.
Fully compatible with Microsoft Word, Excel, and PowerPoint formatsLightweight application that runs smoothly on almost any deviceBuilt-in document encryption and password protection for enhanced local securityFree to use with a familiar, easy-to-navigate user interface
QA img-9

Frequently Asked Questions

Can someone stay logged into my Microsoft account if I just change the password?

Yes, in some cases, active session tokens can remain valid for a short period even after a password change. To completely secure your account, you must use the 'Sign out everywhere' feature in your advanced security settings.

What should I do if a third-party seller asks for a verification code?

You should never provide a verification code to anyone. Legitimate sellers or support agents do not need your personal account verification codes to process purchases or provide assistance.

Does enabling two-step verification automatically log everyone out?

While enabling two-step verification adds a strong layer of security for all future login attempts, it does not automatically instantly boot existing active sessions. Always pair this step with 'Sign out everywhere' and a password change.

How can I tell if the seller made changes to my account?

Log into your Microsoft account and review the 'Recent activity' page. You should also check the security settings to ensure no alternate recovery emails or phone numbers were added without your knowledge.