Disabling 2FA options and only using a security key

Question

So I bought a Yubico. 5c. Now I never realized this before.. But I went to the activity tab on my Microsoft account and didn't realize that my account was compromised and there were people all around the world accessing my account.. So I secured it by changing password and enabling security key. I DON'T want the option to use secondary e-mail as default anymore or as an option for 2FA.. Is there a way to only allow security key? I do not want any redundancy on this account.

Is there a way to get a full report of accesses to see how long my account was compromised for and where it was signed in from?

I'me looking through my other e-mail and I never got any alerts from Microsoft that my account is being accessed or any 2FA codes... So I take it they are bypassing my gmail account somehow...  Which the gmail itself had a security key attached to it so never accessed nor any attenpts to be signed in.

Answer 1

Hi, jlee860.

I'm Jen, an Independent Advisor and an Outlook user just like you. I don't work for Microsoft but I'd be happy to help you figure this out.

I'm sorry to learn that your account has been compromised and I understand that you no longer want to use email as one of your verification options. I checked my account and there is a way of removing it by signing in to https://account.microsoft.com/ then click on the Security tab > Advanced security options, and under email a code click on Remove.

However, I'd like to advise you that it takes 30 days before the removal takes effect (also happened to me when I changed my number). You should be able to see the details here on the support page below.

https://support.microsoft.com/en-us/account-bil...

To check your account sign-in activities, you can go to the Security tab then Sign-in activity to view your account sign-in history. Make sure to also remove any unrecognized device from the Devices tab.

I hope this somehow helps. Feel free to share how it went.

Kind regards,

JC