Suspicious Login Issues

What to Do If You Accidentally Selected 'This Was Me' on a Suspicious Microsoft Sign-In

Partner Editor Oct 7, 2026 868 views

Question details

The user mistakenly authorized an unrecognized and suspicious sign-in attempt on their Microsoft account.

How to Secure Your Microsoft Account After Accidentally Approving a Suspicious Sign-In

Product: Microsoft Account
Device & OS: not provided
Scenario: The user received an alert for a suspicious sign-in and accidentally clicked the 'This was me' button instead of rejecting the prompt.
Observed behavior: An unauthorized individual or bot may now have approved access to the user's Microsoft account, necessitating immediate security intervention to prevent data breaches.

Before you start

Act immediately. Ensure you have access to your recovery email or phone number, as you will need them to verify your identity when resetting your account credentials.

Solution 1Recommended

Change Your Microsoft Account Password Immediately

This is the most critical step to lock out unauthorized users who just gained access.

Changing your password immediately invalidates the current session token the attacker might be using. Ensure you create a strong, unique password that you have not used on any other website.

Sign in to Microsoft Security

Go to the Microsoft account security page (account.microsoft.com/security) and log in with your current credentials.

Select Password Security

Click on 'Password security' or 'Change my password' from the main security dashboard.

Update the Password

Enter your current password, type a new strong password, and click 'Save'. This will immediately apply the new security credentials.

Change Your Microsoft Account Password Immediately

Tip for Strong Passwords: Use a combination of uppercase letters, lowercase letters, numbers, and symbols to ensure your new password is highly secure.

Solution 2

Enable Two-Step Verification

Adding two-step verification ensures that even if someone gets your password in the future, they cannot log in.

Solution 3

Review Recent Sign-In Activity and Connected Devices

Check if the attacker accessed any sensitive data or linked unknown devices to your account.

Free Microsoft Office alternative

Switch to WPS Office for a Secure, Local-Friendly Experience

If dealing with complex online account security issues is frustrating, consider a lighter alternative. WPS Office provides a robust ecosystem for your documents with full local-save capabilities, reducing your reliance on cloud-only accounts while keeping your data safe.

1. Download the Installer: Visit the official WPS Office website and download the free installer for your operating system.
2. Install WPS Office: Run the setup file and follow the quick installation prompts to set up the software.
3. Open Your Files Instantly: Double-click any existing Microsoft Office document to open, edit, and save it directly in WPS Office.

Highly compatible with Microsoft Word, Excel, and PowerPoint file formats.Focuses on offline and local file security to keep your documents private.Lightweight installation with a familiar interface for a seamless transition.Free to use with powerful built-in PDF editing and document management tools.

microsoft office alternative - wps office

Frequently Asked Questions

Can I undo clicking 'This was me' on a Microsoft alert?

You cannot directly 'undo' the click. However, immediately changing your Microsoft account password and forcing a sign-out on all devices effectively revokes the access you accidentally granted.

What happens if an unauthorized person gets into my Microsoft account?

They may gain access to your Outlook emails, OneDrive files, linked payment methods, and Xbox profile. Securing the account immediately is critical to prevent identity theft and data loss.

How do I sign out of all devices on a Microsoft account?

Go to your Microsoft account's 'Advanced security options', scroll down to the bottom of the page, and select 'Sign me out'. Note that this process can take up to 24 hours to complete across all services.

Do I have to use Microsoft Authenticator for two-step verification?

No. While Microsoft recommends their own app, you can use any standard time-based OTP authenticator app, an alternate email address, or an SMS phone number to receive your security codes.

Microsoft Office Security Issues