Account Security Problems

What to Do After Clicking a Phishing Link in Microsoft 365

Elise Williams Oct 20, 2026 870 views

Question details

The user clicked a suspicious phishing link in Microsoft 365 and needs to know the exact steps to secure their account and prevent unauthorized access.

What to Do After Clicking a Phishing Link in Microsoft 365

Product: Microsoft 365
Device & OS: not provided
Scenario: A user has interacted with a potentially malicious email link and wants to mitigate security risks and regain control over their Microsoft 365 account.
Observed behavior: The account is at risk of compromise, requiring an immediate credential reset, activity review, and security hardening to lock out attackers.

Before you start

If you suspect malware was downloaded from the link, disconnect your device from the internet immediately and use a separate, trusted device to change your passwords.

Solution 1Recommended

Change Your Password and Enable MFA

The most critical first step is to lock out attackers by updating your login credentials and adding an extra layer of security.

If you entered any information on the phishing page, your credentials may already be in the hands of attackers. Changing your password immediately breaks their access.

Sign in securely

Navigate to the official Microsoft 365 login page on a safe, trusted device and sign in to your account.

Change your password

Go to your account security settings and select 'Change Password'. Create a strong, unique password utilizing uppercase letters, numbers, and special characters.

Sign out of active sessions

If prompted during the password change, select the option to sign out of all active sessions to disconnect any unauthorized users.

Enable Multifactor Authentication (MFA)

Navigate to the Security info section and enable MFA to require a secondary verification method (like an authenticator app) for all future logins.

Security Tip: Administrators should enforce MFA across the entire organization to prevent future phishing attacks from being successful.

Solution 2

Review Account Activity and Inbox Rules

Attackers often set up forwarding rules or delete emails to hide their tracks. Checking these settings ensures your account remains secure after the initial breach.

Solution 3

Report the Phishing Attempt and Contact IT Support

Notifying your organization's IT department helps protect the entire network from similar attacks and allows administrators to conduct a thorough audit.

Free Microsoft Office alternative

Experience a Secure and Lightweight Alternative with WPS Office

If you are concerned about cloud account security and looking for a robust offline and online productivity suite, WPS Office provides a highly compatible, secure alternative to Microsoft Office. Enjoy seamless document editing and local file protection without the heavy subscription costs.

1. Download the Installer: Visit the official WPS Office website to safely download the free software package.
2. Install WPS Office: Run the installer and follow the on-screen prompts to set up the suite on your computer.
3. Open and Protect Documents: Open your existing Microsoft Office files and utilize built-in document encryption for enhanced local security.

Fully compatible with Microsoft Word, Excel, and PowerPoint formats.Robust local file encryption and document security features to protect sensitive data.Lightweight installation with a user-friendly, familiar interface.Free to use with comprehensive offline editing capabilities that minimize cloud risks.

microsoft office alternative - wps office

Frequently Asked Questions

Can a phishing link infect my computer just by clicking it?

Yes, some advanced phishing links can trigger drive-by downloads that silently install malware or spyware in the background. It is highly recommended to disconnect from the internet and run a full antivirus scan immediately if you suspect the link was malicious.

What should I do if I entered my Microsoft 365 password on a fake login page?

Immediately change your password using a different, trusted device. Sign out of all active sessions and contact your IT administrator right away so they can revoke access tokens and review server audit logs for any signs of unauthorized access.

How can I check if a hacker set up email forwarding in my account?

In Outlook, navigate to Settings (the gear icon) > Mail > Rules, and also check Settings > Mail > Forwarding. Look for any rules you did not create, especially those forwarding messages to external addresses, and delete them immediately.

Does Multifactor Authentication (MFA) protect against phishing?

MFA significantly reduces the risk of account compromise. Even if an attacker obtains your password through a phishing site, they will still need the second authentication factor (like an SMS code or authenticator app approval) to access your Microsoft 365 account.

Microsoft Office Security Issues