Suspicious Login Issues

How to Secure Your Microsoft Account From Unrequested Sign-In Codes

Tauseeq Magsi Oct 14, 2026 870 views

Question details

The user is repeatedly receiving Microsoft one-time verification codes to their email address without initiating any sign-in requests.

How to Secure Your Microsoft Account From Unrequested Sign-In Codes

Product: Microsoft Account
Device & OS: not provided
Scenario: Receiving unsolicited one-time password (OTP) verification emails, indicating that an unknown party is attempting to access the account.
Observed behavior: Verification codes are being continuously sent to the user's Gmail address due to repeated unauthorized sign-in attempts.

Before you start

Never click on any links in unexpected verification emails or share the one-time code with anyone. Always type the official Microsoft account URL directly into your browser to check your security status.

Solution 1Recommended

Review Recent Activity and Update Security Settings

Check your account's sign-in activity to identify unauthorized attempts and secure your account by updating your password and enabling two-factor authentication.

When someone attempts to log into your Microsoft account from a new device or location, Microsoft sends a verification code to your email. If you did not request this code, your account password may have been compromised, but the security check is currently blocking the attacker.

Access your Microsoft Security page

Open your web browser and go directly to https://account.microsoft.com/security. Sign in to your Microsoft account.

Review sign-in activity

Click on 'Sign-in activity'. Review the recent login attempts, paying close attention to the IP addresses, locations, and device types of any unauthorized access attempts.

Change to a strong password

Navigate back to the main security dashboard and select 'Change password'. Create a strong, unique password that you have never used on any other website.

Enable Microsoft Authenticator

Under 'Advanced security options', set up two-step verification using the Microsoft Authenticator app. This adds a robust layer of security beyond email codes.

Update recovery information

Ensure your alternative email addresses and phone numbers are current so you never lose access to your account during a security lockdown.

Review Recent Activity and Update Security Settings

Keep Your Device Safe: In addition to securing your account, ensure your computer's operating system is fully up to date with the latest security patches to prevent malware from stealing your new credentials.

Free Microsoft Office alternative

Try WPS Office for a Secure and Lightweight Document Experience

If you are dealing with Microsoft account security issues or prefer an office suite that doesn't force continuous cloud syncing, WPS Office is an excellent free alternative. It provides a lightweight, easy-to-use interface and robust offline capabilities.

1. Download WPS Office: Visit the official WPS Office website and download the free installer for your operating system.
2. Install the Software: Run the installer and follow the simple on-screen instructions to set up the suite on your device.
3. Start Creating: Open WPS Office and immediately start creating or editing your documents without requiring mandatory cloud account logins.

Fully compatible with Microsoft Word, Excel, and PowerPoint formats (.docx, .xlsx, .pptx).No mandatory cloud account sign-in required for basic offline document editing, enhancing your privacy.Lightweight installation that runs fast and smoothly on both older and newer devices.Free to download with a highly familiar user interface, ensuring a seamless migration.

microsoft office alternative - wps office

Frequently Asked Questions

Why am I getting Microsoft verification codes I didn't request?

This usually occurs when someone else knows your email address and is attempting to guess your password. The verification code email means that your account's two-step verification successfully stopped them from logging in.

Should I click the 'Report the user' link in an unsolicited verification email?

No. Phishing scammers often send fake verification emails containing malicious links designed to steal your credentials. Always go directly to account.microsoft.com in your web browser instead of clicking links in emails.

Can hackers access my account if they only have my email address?

If they only have your email address, they cannot access your account without your password and the one-time verification code. However, you should ensure your password is strong and unique to prevent them from eventually guessing it.

How do I stop receiving unrequested one-time password emails?

While you cannot prevent malicious actors from attempting to log in, you can create a new primary alias for your Microsoft account for sign-in purposes only. You can then disable sign-in privileges for the email address that is currently being targeted by the spammers.

Microsoft Office Security Issues