Suspicious Login Issues

How to Stop Repeated Unauthorized Microsoft Account Sign-In Attempts

Maira Mehtab Sep 22, 2026 868 views

Question details

The user needs to stop continuous unauthorized sign-in attempts on their Microsoft account originating from foreign countries.

Product: Microsoft Account
Device & OS: not provided
Scenario: Securing a personal or work account against foreign brute-force or unauthorized login attempts.
Observed behavior: Repeated failed login attempts are logged in the account's recent activity from unknown locations, despite having two-factor authentication enabled.

Before you start

Ensure you have access to your Microsoft account's alternate recovery email or phone number before making significant security changes to avoid locking yourself out.

Solution 1Recommended

Review Recent Activity and Update Security Methods

Check your account's recent activity to confirm the attempts are failing, and update your security credentials to ensure comprehensive protection.

Failed attempts usually indicate that someone knows your email address but not your password. Because your two-factor authentication (2FA) is already blocking them, your account is largely secure. However, taking proactive steps is highly recommended to ensure no unauthorized authentication methods are linked.

Review Sign-In Activity

Log in to your Microsoft account, navigate to the 'Security' tab, and click on 'Sign-in activity' to verify that all suspicious attempts show as 'Unsuccessful sync' or 'Incorrect password'.

Remove Unknown Sessions

Go to 'Advanced security options' and review the devices and apps connected to your account. Remove any unrecognizable authentication methods or old sessions.

Update Password

Change your password to a strong, unique combination of letters, numbers, and symbols if you suspect your current password has been compromised.

Report Suspicious Activity

Use the 'Secure your account' prompt next to any highly suspicious activity log to report it directly to Microsoft.

Maintain Two-Step Verification: Keep Microsoft Authenticator and two-step verification enabled. It is your best defense against brute-force attacks and password leaks.

Solution 2

Change Your Sign-in Alias to Stop Attempts

If the sheer volume of attempts is alarming, you can change your primary login alias so attackers no longer have the correct email address to attempt logins.

Free Microsoft Office alternative

Looking for a Secure and Free Office Alternative?

If you are concerned about your Microsoft account security or simply want a lightweight, offline-friendly alternative, WPS Office is an excellent choice. It offers robust local document protection, familiar interfaces, and seamless migration without forcing you into cloud-dependent logins.

1. Download the Installer: Visit the WPS Office official website and click the Free Download button.
2. Install WPS Office: Run the downloaded installer file and follow the simple on-screen instructions to complete the setup.
3. Open Your Documents: Launch WPS Office and open your existing Microsoft Office documents directly with full format retention.

Fully compatible with Microsoft Word, Excel, and PowerPoint formats (.docx, .xlsx, .pptx).Local file encryption and document password protection for enhanced offline security.Lightweight design that runs smoothly on older and newer devices alike.Free to use with a familiar user interface, requiring zero learning curve.

microsoft office alternative - wps office

Frequently Asked Questions

Why doesn't Microsoft notify me of failed sign-in attempts?

Microsoft generally does not send email notifications for failed sign-in attempts because it would result in excessive spam for users targeted by automated brute-force attacks. They rely on your two-factor authentication to block access silently, logging the events in the 'Recent activity' page instead.

Can a hacker bypass Microsoft Authenticator?

While Microsoft Authenticator is highly secure, an attacker could theoretically bypass it if they gain physical access to your unlocked device, trick you into approving an MFA fatigue attack (repeated prompt spam), or compromise your device with malware. Always verify login prompts carefully before tapping 'Approve'.

Should I delete my Microsoft account if it is under constant attack?

No, deleting your account is unnecessary and will cause you to permanently lose access to your emails, purchases, and subscriptions. Instead, secure it with a strong password, maintain 2FA, and consider changing your sign-in alias to stop the attempts entirely.

Microsoft Office Security Issues