outlook.com tried to sign on too many times but I did not

Question

Some days when I sign on to Outlook.com on Windows 11 using Firefox it fails and it says "You've tried to sign in too many times with an incorrect account or password." but I never tried to sign on. On other days it works fine. Is someone trying to hack my account?

Answer 1

Hello, thank you for reaching out to Microsoft Q&A.

As AI suggested, first check for any unusual activity in your Microsoft account.

If there are none, it is recommended to enable two-factor authentication and use an authenticator app for verification.

To enable two-factor authentication, sign in with your account here-

https://account.live.com/proofs/Manage

Enable Two-factor authentication.

Important: Ensure you have at least 3 verification methods such as Phone number, email address, authenticator app active in your account.

Next, click Add another way to sign in to your account > Select Use an app > Set up Microsoft Authenticator to verify your identity.

This should resolve the "You've tried to sign in too many times with an incorrect account or password" error.

---

Answer 2

Yes, this behavior can indicate that there have been repeated failed sign-in attempts against the account, even if they were not made manually on that device. It can be caused by:

• Someone else trying to guess the password (possible hacking attempts).
• A saved/old password in a browser, app, or device repeatedly trying and failing to sign in in the background.
• Automated systems temporarily blocking sign-in after too many incorrect attempts to protect the account.

To protect the account and check what is happening:

1. Review recent sign-in activity
   • Go to the Security basics page and sign in.
   • Select Review activity and check the Recent activity and Unusual activity sections.
   • For any activity that is not recognized:
     • If it appears under Unusual activity, expand it and select This wasn't me.
     • If it appears under Recent activity, expand it and select Secure your account.
2. Secure the account
   • From the Security basics page, select Change password and set a strong, unique password that is not used on other sites.
   • Make sure the new password is updated on all devices and apps (PC, phone, mail apps, older browsers) so they are not repeatedly trying with an old password.
3. If sign-in is blocked or keeps failing
   • If the account becomes blocked due to unusual activity, use the Sign-in Helper from the Unblock my Outlook.com account article to unblock it.
   • If still unable to sign in or the account appears locked after many attempts, follow the guidance in When you can't sign in to your Microsoft account from the unusual sign-in article.
4. Reduce future risk
   • Set up additional verification methods (such as Microsoft Authenticator or other sign-in options) so that Other ways to sign in can be used if a password-based sign-in is temporarily blocked.
   • Avoid repeated sign-in attempts if the error appears; wait for the temporary lockout to clear before trying again, as repeated attempts can extend the block.

These steps will show whether there are suspicious sign-ins and will help secure the account if someone is trying to access it.

---

References:

• What happens if there's an unusual sign-in to your account
• How to sign in to Outlook.com
• Unblock my Outlook.com account
• Error 400 when signing in