How to Secure Your Microsoft Account After Sharing a Verification Code
Question details
The user needs to secure their Microsoft account and ensure no unauthorized access remains after sharing a verification code with a third-party seller.

- Product
- Microsoft Account
- Device & OS
- not provided
- Scenario
- The user shared a verification code with a seller to purchase a game and wants to revoke any potential access or sign-in tokens the seller might have acquired.
- Observed behavior
- The seller accessed the account using the shared code, raising concerns about ongoing unauthorized access or retained sign-in tokens.
Ensure you have access to your primary email or phone number associated with the account, and log in from a trusted personal device before making these security changes.
Reset Password and Force Sign Out Everywhere
The most critical step is to immediately change your password and invalidate all active login sessions to ensure the seller cannot retain access.
Simply changing your password may not immediately terminate active sign-in tokens that the seller might hold. Using the 'Sign out everywhere' feature forces all devices to re-authenticate.
Log in to your Microsoft account security dashboard, select 'Password security' or 'Change my password,' and create a strong, unique password.
On the security dashboard, navigate to 'Advanced security options' and click on 'Sign me out everywhere' to invalidate all active tokens and sessions.
Under 'Advanced security options,' turn on two-step verification (2FA) and link it to the Microsoft Authenticator app for the highest level of security.

Audit Account Activity and Revoke App Permissions
Check your account for unauthorized changes or hidden access points left by the seller.
Try WPS Office for a Secure and Free Productivity Experience
If you are managing Microsoft account security issues and want a hassle-free, secure way to work on your documents offline, consider switching to WPS Office. It provides a lightweight, highly compatible, and free alternative to Microsoft Office, ensuring your local documents remain private without relying on complex cloud account subscriptions.
- 1. Download the software: Visit the official WPS Office website and download the free installer for your operating system.
- 2. Install WPS Office: Run the installer and follow the simple on-screen instructions to set up the software on your device.
- 3. Open your files securely: Launch WPS Office and instantly open your existing Microsoft Office documents locally without requiring online account verification.

Frequently Asked Questions
Can someone stay logged into my Microsoft account if I just change the password?
Yes, in some cases, active session tokens can remain valid for a short period even after a password change. To completely secure your account, you must use the 'Sign out everywhere' feature in your advanced security settings.
What should I do if a third-party seller asks for a verification code?
You should never provide a verification code to anyone. Legitimate sellers or support agents do not need your personal account verification codes to process purchases or provide assistance.
Does enabling two-step verification automatically log everyone out?
While enabling two-step verification adds a strong layer of security for all future login attempts, it does not automatically instantly boot existing active sessions. Always pair this step with 'Sign out everywhere' and a password change.
How can I tell if the seller made changes to my account?
Log into your Microsoft account and review the 'Recent activity' page. You should also check the security settings to ensure no alternate recovery emails or phone numbers were added without your knowledge.




