How to Stop Microsoft Account Sign-In Attempts From Outside the US
Question details
The user wants to block unauthorized login attempts to their personal Microsoft account originating from outside the United States.
- Product
- Microsoft Account
- Device & OS
- not provided
- Scenario
- Receiving repeated single-use security codes due to someone attempting to access the account with an exposed email address.
- Observed behavior
- Microsoft personal accounts do not offer geographic blocking settings, leaving users unable to natively block login attempts based on location.
Check your Microsoft account's Recent Activity page to confirm the locations of the unauthorized sign-in attempts and ensure that none of them were successful.
Change Sign-In Preferences Using a New Account Alias
Since Microsoft does not support geo-blocking for personal accounts, the most effective way to stop unauthorized attempts is to prevent your exposed email address from being used to sign in.
By creating a new alias and disabling sign-in privileges for your current exposed email, attackers will receive an 'account does not exist' error when they try to log in, while you can still receive emails to that address normally.
Navigate to the Microsoft account website and sign in. Go to the 'Your info' tab and select 'Edit account info'.
Click 'Add email' to create a new alias. You can either create a new Outlook email address or add an existing email address. Once added, click 'Make primary' next to the new alias.
At the bottom of the 'Manage how you sign in to Microsoft' page, click 'Change sign-in preferences'. Uncheck the box next to your exposed, original email address and save your changes.
Enable Two-Step Verification (MFA)
Adding an extra layer of security ensures that even if an attacker guesses your password, they cannot access your account without your physical device.
Check for Data Breaches and Update Passwords
A sudden spike in login attempts from foreign countries often means your email and password combination was exposed in a third-party data breach.
Try WPS Office for a Secure and Lightweight Document Experience
While you secure your Microsoft account from unauthorized access, consider using WPS Office for your document needs. It offers a secure, offline-friendly environment without forcing continuous cloud logins, ensuring your local files remain private and easily accessible.
- 1. Download the installer: Visit the official WPS Office website and click the free download button.
- 2. Install the software: Run the downloaded installer file and follow the quick on-screen instructions.
- 3. Open and edit your files: Launch WPS Office to instantly open, edit, and save your existing Microsoft Office documents.
Frequently Asked Questions
Can I block logins from specific countries on a personal Microsoft account?
No, personal Microsoft accounts do not have a built-in feature for geographic blocking (geo-blocking). This feature is currently only available for enterprise and business accounts using Microsoft Entra ID (formerly Azure Active Directory) Conditional Access.
Why am I getting single-use security codes I didn't request?
Receiving unprompted single-use security codes indicates that someone knows your email address and is attempting to sign in. They might be trying to guess your password or use a leaked password, triggering Microsoft's automated security verification.
Will removing my email as a sign-in alias delete my inbox?
No. When you uncheck an alias in the 'Change sign-in preferences' menu, you are only disabling its ability to be used on the login screen. Your inbox remains completely unaffected, and you will continue to send and receive emails normally using that address.
