How to Secure Your Outlook Account from Anonymous Login Attempts
Question details
The user needs to secure their Outlook account after noticing unauthorized login attempts from foreign locations and receiving a spoofed threatening email.

- Product
- Microsoft Outlook
- Device & OS
- not provided
- Scenario
- The user is attempting to regain security control over their email account after detecting suspicious activity and potential email spoofing.
- Observed behavior
- Repeated Outlook sign-in attempts from unfamiliar locations appear on the account activity page. Additionally, a threatening email was received that appears to have been sent from the user's own email address.
Before updating your security settings, ensure you are using a trusted, malware-free device and a secure internet connection to prevent hackers from intercepting your new credentials.
Review Activity and Secure Microsoft Account Credentials
Use this solution immediately to block unauthorized access, verify which login attempts were successful, and enforce modern security protocols on your account.
If attackers are actively trying to access your account, updating your credentials and enabling multifactor authentication (MFA) will immediately cut off their access and protect your data.
Navigate to the Microsoft Account Recent Activity page (account.live.com/activity) and sign in. Review the list of sign-ins and look for any unfamiliar locations or devices marked as 'Successful sign-in'.
Click on the 'Security' tab at the top of your Microsoft account dashboard, select 'Password security', and choose 'Change my password'. Create a strong, unique password that you have never used elsewhere.
Under the 'Advanced security options' section, click 'Turn on' under 'Two-step verification'. Follow the on-screen prompts to link the Microsoft Authenticator app or your mobile phone number for verification codes.
Scroll down on the 'Advanced security options' page and click 'Sign me out'. This action will forcefully terminate all existing active sessions across all devices within 24 hours.

Manage Spoofed Threatening Emails
Use this method to handle alarming emails that claim your account is compromised and appear to be sent from your own email address.
Enhance Your Productivity with WPS Office
While securing your Outlook account, consider upgrading how you manage your documents. WPS Office is a robust, free alternative to Microsoft Office that offers powerful tools for word processing, spreadsheets, and presentations without the heavy subscription fees.
- 1. Download WPS Office: Visit the official WPS Office website and click the free download button for your operating system.
- 2. Install the Suite: Run the downloaded setup file and follow the straightforward on-screen instructions to complete the installation.
- 3. Open Your Documents: Launch WPS Office to instantly open, edit, and save your existing Microsoft Word, Excel, and PowerPoint files without formatting issues.

Frequently Asked Questions
Why does the threatening email look like it came from my own Outlook account?
Attackers often use email spoofing, forging the 'From' address to make it appear as though they have hacked your account. This is a common psychological trick used to demand ransom or cause panic, even if they never successfully logged into your account.
How can I tell if an anonymous login attempt was actually successful?
Navigate to your Microsoft account's Recent Activity page at account.live.com/activity. Look at the 'Session type' and status. If an unrecognized location says 'Successful sign-in', the attacker accessed your account, and you must change your password immediately.
What is the Microsoft Authenticator app and why should I use it?
Microsoft Authenticator is a free mobile app that provides multifactor authentication (MFA). It adds a critical layer of security by requiring a time-sensitive code or fingerprint approval on your mobile device whenever a new login attempt occurs, blocking anonymous attackers.




