Managing personal Outlook.com account settings, security, and privacy
The location and IP information shown for sign-ins and devices does not always match the exact physical location or the device in use, and by itself does not prove that someone else has access.
Key points:
- Why location looks wrong (London vs Sunderland)
- Microsoft often determines sign‑in location from the IP address and network routing, not precise GPS.
- Internet traffic can be routed through distant locations (for example, via an ISP’s London gateway), so a sign‑in from Sunderland can legitimately appear as London.
- Mobile networks and some broadband providers are “especially hard to pinpoint” and can show locations that are far from the actual place.
- Why the IP address may look unfamiliar
- The IP shown is the address seen by Microsoft’s services, which can differ from what is seen on a home router or PC if traffic passes through other network equipment or providers.
- This difference alone does not mean another person is using the account.
- How to check if someone else actually accessed the account
Use the Recent activity / My sign-ins pages and review the details, not just the city:- For a work or school account:
- Go to My Account and sign in.
- Select Recent activity.
- Expand each sign‑in and check: date/time, app used, operating system, browser, and location.
- For a personal Microsoft account (Outlook.com, etc.):
- Go to the Recent activity page from the account’s security area.
- Expand each event to see IP address, map, device/OS, and browser/app.
- If an event is in the Unusual activity section, choose This was me if recognized, or This wasn’t me if not.
- For a work or school account:
- What “nearby address” or nearby locations mean
- Location services and sign‑in logs can show approximate or nearby addresses based on IP, Wi‑Fi, or cell towers.
- A nearby address in the log does not automatically mean that specific neighbor or address has access; it is an approximation.
- What to do if any activity is not recognized
If any sign‑in or activity truly is not yours:- On the Recent activity page, select This wasn’t me for that event.
- Immediately change the account password.
- Review and update security info (phone, alternate email) from the account’s security page.
- Turn on two‑step verification where available.
- About the “parent required” message
That message is related to age or family settings on the account, not to hacking. It does not mean someone else has access; it means the system currently thinks the account needs adult/parental confirmation.
These steps will confirm whether there is real unauthorized access and help secure the account if needed, while avoiding false alarms caused by approximate location/IP data.
References: