being hack again

Question

i have change my password with a very strong one and i am still getting sign in request on my phone is someone trying to hack my account again

Answer 1

Hi,

I'm sorry to hear that you're experiencing this issue. Login attempts typically occur when your email address has been leaked on the dark web. As long as these attempts are unsuccessful, your account remains safe. To prevent this, create a new alias for your account and set it as the primary. Then, configure your account settings to require sign-in only with this new identifier.

1. Log in to your Outlook email account: Outlook.com or https://account.live.com
2. Under your profile photo, click on "My Microsoft account."
3. On the new page, click "Your info" and locate the "Account info" section.
4. Click "Sign-in preferences" and, under "Account aliases," add a new email address or phone number that is not publicly known.
5. Ensure it’s a valid and accessible contact.
6. After adding, select "Make primary" to set this new email or phone number as your primary sign-in.
7. Scroll to "Change sign-in preferences," uncheck your current Outlook email address, and check the box for your new login method.

Important: DO NOT delete the current/old email address

This will keep your email account active for sending and receiving messages while preventing login attempts.

---

You might also consider adding an extra layer of protection. See “How to help keep your Microsoft account secure.”

https://support.microsoft.com/account-billing/how-to-help-keep-your-microsoft-account-secure-628538c2-7006-33bb-5ef4-c917657362b9

Answer 2

If you are receiving sign-in requests on your phone even after changing your password to a strong one, it could indicate that someone is attempting to access your account. Here are some steps you can take to secure your account:

1. Enable Multi-Factor Authentication (MFA): If you haven't already, enable MFA on your account. This adds an extra layer of security by requiring a second form of verification.
2. Monitor for Unusual Activity: Keep an eye on your account activity for any unauthorized access or changes. Look for any sign-ins from unfamiliar devices or locations.
3. Check for Account Takeover Signs: If you notice frequent sign-in requests, it could be a sign of an account takeover attempt. Ensure that your recovery options (like email and phone number) are up-to-date and secure.
4. Use Security Features: Utilize security features like Microsoft Entra Conditional Access policies to restrict sign-ins based on location or to monitor excessive authentication failures.
5. Change Passwords Regularly: Continue to change your passwords regularly and ensure they are unique and complex.

If the issue persists, consider reaching out to your IT administrator or the support team for further assistance.

---

References:

• Microsoft Entra security operations for user accounts
• Sign-in protection: Account takeover