Forum Discussion
Many unauthorized sign-in attempts to Microsoft account
When I look at my Microsoft account page that shows sign-in attempts, it show 6-10 every day from all over the world. They are all unsuccessful since I have a strong password and change it a couple times a year. I'm curious as to why this happens. I wonder if it's because I have used the same primary email address for almost 30 years and it's been used on literally hundreds of websites. Anyone else see this?
3 Replies
- Jie-AosiIron Contributor
Your email address is a key that unlocks your Microsoft account, but that key is also used for dozens, maybe hundreds, of other online services. If someone gets ahold of that key, they can try using it to log into all those places. Microsoft's security systems are constantly checking for suspicious activity—and that includes a ton of automated attempts from bots and hackers.
Hi Ulisesin ,
- If your account is part of an organization (like Microsoft 365 Business, Enterprise, or Education), then geo-restriction is possible using Azure Active Directory. its reduced.
- Credential stuffing
- Phishing attempts
- Brute-force attacks
- MasonCookIron Contributor
Hackers and malicious bots scan huge pools of email addresses (including long-used ones like yours) across the internet, trying common passwords or patterns. Your account might be on their radar just because it’s active and well-known.