A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
Hi Stuart little,
Microsoft cannot take direct action on individual IP addresses reported by users (for example blocking or “punishing” a specific IP)
1. Review and mark the activity
Go to Recent activity and:
- Select the suspicious sign‑in
- Mark it as “This wasn’t me”
This feeds Microsoft’s security systems and helps protect your account further
2.Enable Two‑Step Verification (if not already on)
This is the single most effective protection.
- Even if someone gets your password again, they cannot sign in
- Microsoft explicitly recommends this after unusual activity
3. Sign out of all sessions
This is very important if the attacker signed in before you changed your password.
Look for:
- Sign me out from everywhere
- Or Advanced security options
This kills any existing login sessions (including stolen tokens