single-use code I did not request

Question

I received a single-use code to my email adress that I did not request.

I'm not sure what this is and should I be concerned.

Answer 1

A single-use (verification) code that was not requested usually means one of the following:

1. Someone is trying to access the account and triggered a verification step.
2. Someone accidentally typed the email address or phone number when trying to sign in.
3. A code that was requested earlier was delayed in delivery.

Do not use or reply to any verification code that was not requested. Without the code, an attacker cannot complete sign-in, so the account remains safe.

To improve security and reduce unwanted codes, enable passwordless sign-in methods such as Microsoft Authenticator, Windows Hello, SMS/Email codes, or physical security keys, and consider removing passwords where possible.

If more unexpected codes continue to arrive, review and update security info and sign-in methods for the account and follow the guidance in the referenced articles on going passwordless and securing the Microsoft account.

---

References:

• Troubleshoot Microsoft verification code issues
• Common problems with two-step verification for a work or school account
• Why is Microsoft texting me?

Answer 2

Hi,

If you are getting a single use code that you did not request, it could mean that someone accidentally entered your email address, or someone may be trying to access your Microsoft account.

If you did not request the code yourself, do not share or use the code. The good thing is that receiving the code alone does not mean your account has been accessed.

To help secure your account, I suggest the following:

• Change your Microsoft account password immediately and make sure it is strong and unique.

• Review your recent sign in activity here to check for unfamiliar login attempts: https://account.microsoft.com/security

• If you notice unfamiliar sign in attempts from unknown locations or devices, choose the option that says “This wasn’t me” on the activity page to report the activity to Microsoft.

As an additional security measure, please see “How to help keep your Microsoft account secure.”: https://support.microsoft.com/account-billing/how-to-help-keep-your-microsoft-account-secure-628538c2-7006-33bb-5ef4-c917657362b9