How to Secure Your Microsoft Account After Unauthorized Access
Question details
The user needs to regain control and secure their Microsoft account and computer after suspecting a security breach and physical tampering.

- Product
- Microsoft Account
- Device & OS
- not provided
- Scenario
- Securing an account and checking for device compromise after someone had physical access to the computer, resulting in unfamiliar connected accounts and changed statuses.
- Observed behavior
- Unexpected screenshots, unfamiliar recovery email addresses, unknown work or school accounts linked to the device, and unauthorized changes to the availability status.
Before beginning the recovery process, ensure you are using a secondary, trusted device (like your smartphone or another computer) to change your password, preventing any potential keyloggers on the compromised device from capturing your new credentials.
Update Credentials and Enable Two-Step Verification
Immediately secure your account from a safe device to lock out unauthorized users and prevent further unauthorized access.
Changing your password is the most critical first step. By combining a strong, new password with two-step verification, you effectively cut off access to anyone who might have obtained your previous login details.
Access the Microsoft account login page using a smartphone or a separate computer that you know is secure and free of malware.
Sign in to your Microsoft Security dashboard, select 'Password security', and create a strong, unique password.
Navigate to the 'Advanced security options' menu, turn on two-step verification, and configure it using an authenticator app or phone number.
While in the security settings, carefully review and delete any unfamiliar email addresses or phone numbers listed under your recovery options.

Audit Account Permissions and Windows Settings
Identify and remove any unauthorized backdoors, work/school accounts, or connected apps that were added during the physical compromise.
Scan and Clean the Compromised Device
Remove potential malware, remote-access tools, or malicious browser extensions installed on your computer.
Looking for a Secure, Standalone Office Suite?
While securing your Microsoft account, consider using WPS Office. It provides a secure, lightweight, and highly compatible alternative to Microsoft Office that doesn't rely on complex account setups or constant cloud connectivity for offline work.
- 1. Download WPS Office: Visit the official WPS website and download the installation file for your operating system.
- 2. Install the Software: Run the installer and follow the simple on-screen instructions to set up the office suite on your secure device.
- 3. Open Your Documents: Launch WPS Office to securely open, edit, and save your existing Microsoft Office files without worrying about online account sync issues.

Frequently Asked Questions
How can I check if someone accessed my Microsoft account?
Log into your Microsoft account, navigate to the Security tab, and click on 'Review activity'. This will show you a list of all recent successful and unsuccessful login attempts, along with their geographical locations and IP addresses.
What should I do if an unfamiliar work or school account is linked to my PC?
Go to Windows Settings > Accounts > Access work or school. If you see an account you do not recognize, click on it and select 'Disconnect' to remove its access and administrative policies from your device.
Will changing my Microsoft password automatically log out other devices?
Yes, changing your password will invalidate active sessions on other devices, though it may take a short amount of time to process. For an immediate effect, you can select the 'Sign me out everywhere' option located in the Advanced Security Options of your Microsoft account dashboard.
Can unauthorized physical access bypass my computer's password?
Yes, if an individual has physical access to your device, they can potentially use specialized hardware, bootable USB drives, or remote-access installations to bypass local login screens or extract account tokens.




