Windows 10: How is it possible to replace ALL of the security info for a Microsoft account?

I received an email from the accountprotection.microsoft.com


It states:



Someone started a process to replace all of the security info for the Microsoft account pa*****.


Obviously this is concerning.


The email goes on to explain that I should:


If this wasn't you, someone else might be trying to take over pa*****. Click here and we'll help you protect this account.



Which is fine, I already have 2FA, and all my important details are there to protect my account.

What I don't understand is how someone can trigger 'replace all of the security info' on an account.


If they did this obviously I'd like whatever process was trigger to be stopped, but I have no idea what where and how that particular process is done, and what Microsoft is doing to prevent it.


If someone doesn't have my phone number, email addresses, or 2FA, then how can they possibly be taking that action?

:)

 

How to change password for login without verifying security info?.

Hi Samuwella,

Sorry for the loss, not to worry we will try our best to assist you with the issue you are facing with Windows 10 account security.

Lets follow the below steps to fix the issue with Windows 10.

1. We Suggest you to refer to the below article on "Get back into your Microsoft account if it's been compromised".
https://support.microsoft.com/en-us/help/10494/microsoft-account-get-back-compromised-account

2. Also refer to the below article on "How do I replace my security info"?
https://support.microsoft.com/en-us/help/10634/microsoft-account-replace-all-security-info

3. Two-step verification helps protect you by making it more difficult for someone else to sign in to your Microsoft account. It uses two different forms of identity: your password, and a contact method (also known as security
info). Even if someone else finds your password, they'll be stopped if they don't have access to your security info.

Refer the steps in the link :

https://support.microsoft.com/en-us/help/12408/microsoft-account-about-two-step-verification

Keep us informed with the above information for better assistance.

 

Microsoft account - Are security questions removed after I enabled the 2-step verification?

Hello,

Thank you for contacting Microsoft Community.

We understand your concern in this regard.

Generally, a security question is helpful to recover your Microsoft account password, when you lose access to it. Enabling Two-step verification won't effect your security question, instead it is an advanced security feature that makes it harder for someone
to break in to your account with just a stolen password. To replace your security info

• 
  Go to
  Security settings, and sign in with your Microsoft account.
  
• 
  If you’re asked to enter a security code to continue, and you can’t get that code, choose
  I don't have any of these or I can't verify my account from the drop-down list, then follow the instructions to reset your security info.
  
• 
  On the Security settings page, your security info is under Security info helps keep your account secure. Choose
  Remove for any you want to remove. You may be prompted to add new security info before you can remove the old info.
  

If you remove all of your security info, there’s a 30-day wait during which we help protect sensitive parts of your account so nobody can change your security settings or use your payment options. During this period you can still use your email, Skype,
OneDrive, and devices as usual. After the 30 days, you’ll be notified that the wait is over and it’s time to enter new security info.

Learn more

• 
  Two-step verification
  
• 
  App passwords
  
• 
  Trusted devices
  
• 
  Security info & security codes
  

Keep us posted if you require further assistance.

 

Remove account


I suggest you backup your personalized files first before removing the account.
To delete an account, follow these steps:

1. Press WIN + X keys and click Command Prompt (Admin) from the menu.
2. Type the following command and press Enter. Replace test with the name of your sister's account. Code:
   
   Code:

   net user test /del