Detect compromised passwords

After looking in the Sign-in view and seeing all the login attempts trying to guess passwords we implemented MFA, so feel a little more secure! However we still get phishing emails and users will be ...

Access Management

microsoft 365

Kelvin Papp
Mar 02, 2020
Huw_W1,

You'll see a failure reason of "other" in the sign-in logs, as opposed to "invalid username or password":

or...

The sign-in error code is also key - 500121 above relates to a failed strong authentication in the context of "other":

Regards,

Kelvin

Huw_W1

Copper Contributor

Mar 02, 2020

Kelvin Papp

Thanks for your response, I guess my question is really what should i look for in the sign in logs to spot a login attempt which presents a correct password but then fails the MFA check?

Kelvin Papp

Copper Contributor

Mar 02, 2020

Huw_W1,

You'll see a failure reason of "other" in the sign-in logs, as opposed to "invalid username or password":

or...

The sign-in error code is also key - 500121 above relates to a failed strong authentication in the context of "other":

Regards,

Kelvin