Forum Discussion
Understanding Sign-In logs - password hash sync from another country?
Gday Had a couple users show up today at risk - failed logins from the US, while we're in Canada. Users are not in the US, not using VPNs, logins are to Microsoft services (Office Home, One Outl...
Password hash sync means that the DC is owner of the password and a hash (of a hash) of that password is synced to your Entra ID tenant. That hash is used to validate the credentials from the user trying to sign in. It this case some malicious users are probably trying to password spray some of your users. You should look out for valid passwords and failed MFA's. (I do hope all your users are on MFA).