Managing personal Outlook.com account settings, security, and privacy
Those messages are legitimate Microsoft account security emails and indicate that someone (or something) tried to sign in to those Microsoft accounts and requested a verification/single-use code.
Key points:
- The sender domain
@accountprotection.microsoft.comis an official Microsoft domain used for account security notifications, including verification codes and account updates. - Receiving such codes without requesting them usually means:
- Someone is trying to access the account using the email address, or
- Someone mistyped their own email and entered these addresses by mistake, or
- A previously requested prompt/code was delayed in delivery.
- As long as the code is not entered anywhere and the email is ignored or deleted, the account remains safe. The code alone does not give access without the correct password and other checks.
- If these emails were not requested:
- Do not share or use the codes.
- Ensure the Microsoft account password is strong and unique.
- Consider reviewing security info and enabling additional protection (for example, Microsoft Authenticator) if not already in place.
- Continue to deny or ignore any prompts or codes that were not initiated.
If verification codes stop arriving when actually needed, follow the guidance in the verification-code troubleshooting article to check junk folders, trusted senders, and other delivery issues.
References: