logo
search
Suspicious Login Issues

How to Stop Unauthorized Microsoft Account Sign-In Attempts

Maira MehtabMaira Mehtab Sep 22, 2026 869 views

Question details

The user needs to protect their Microsoft account and stop receiving unexpected verification codes and repeated automated sign-in attempt notifications, even after they have changed their password.

Product
Microsoft Account
Device & OS
not provided
Scenario
Receiving continuous, unexpected automated sign-in requests and single-use verification codes from unauthorized parties.
Observed behavior
Repeated sign-in notifications and authentication codes are triggered continuously by external automated attempts to breach the account.
Before you start

Ensure you are accessing your account settings from a secure, trusted device and a safe Wi-Fi network before making major security modifications.

Solution 1Recommended

Change Your Account Alias and Disable the Exposed Email

By creating a new sign-in alias and turning off sign-in capabilities for the exposed email, automated bots will no longer be able to attempt logins using your old address.

If automated bots have your current email address, changing your password won't stop them from trying to log in. The most effective method is to remove their ability to use that specific email as a login ID, without deleting your actual inbox or account.

1
Add a new email alias

Sign in to your Microsoft account and navigate to the 'Your info' tab. Click on 'Edit account info' in the Account info section, then select 'Add email' to create a new alias.

2
Make the new alias primary

Once the new alias is added, click 'Make primary' next to the new email address. Do not remove your old email address, as you still want to receive emails sent to it.

3
Change sign-in preferences

At the bottom of the alias management page, click on 'Change sign-in preferences'.

4
Disable sign-in for the exposed email

Uncheck the box next to your old, exposed email address and click 'Save'. Bots will now receive an 'account does not exist' error when trying to log in with that email, stopping the verification codes.

Account Functionality Retained: Disabling sign-in for an alias does not delete the email address. You will still receive all emails sent to your original address perfectly fine.
Free Microsoft Office alternative

Try WPS Office for Seamless Local Document Management

Dealing with constant account lockouts and mandatory cloud sign-ins can be frustrating. Switch to WPS Office, a free, lightweight, and highly compatible alternative that lets you edit your documents locally without requiring complex cloud accounts or persistent logins.

  1. 1. Download the Installer: Visit the official WPS Office website and click the free download button.
  2. 2. Install WPS Office: Run the downloaded setup file and follow the quick installation prompts.
  3. 3. Open Your Files: Set WPS Office as your default application to seamlessly open and edit your existing Microsoft Office files.
Fully compatible with Microsoft Office formats including DOCX, XLSX, and PPTX.Edit documents locally on your device without mandatory account sign-ins.Lightweight application with incredibly fast startup times.All-in-one suite includes Writer, Spreadsheet, Presentation, and a built-in PDF editor.
microsoft office alternative - wps office

Frequently Asked Questions

Why do I keep getting Microsoft single-use codes I didn't request?

This happens when someone has acquired your email address and is trying to guess your password or use automated tools to access your account. The system sends you a code to verify it's you, which means their attempt was successfully blocked.

Should I delete my Microsoft account if it is being targeted by bots?

No, you do not need to delete your account. By adding a new email alias and disabling the sign-in capability for the targeted email address, you can stop the automated attempts while keeping all your emails, files, and purchases intact.

What happens if I accidentally approve an unexpected sign-in prompt?

If you approve an unauthorized prompt, the attacker may gain full access to your account. You should immediately change your password, review your recent account activity, and use the security dashboard to sign out of all devices.