Windows 10: Is there a way to determine if my MS Live Account password has been compromised, when...

I have two factor authentication active for my MS Live account, and I want to be able to determine if my password has been compromised. When I go to https://account.live.com/Activity? I see many failed login attempts from all around the world, and recently I got a two factor authentication request on the MS Authenticator App. The request appeared to be from another country. I denied the request. Bottomline question: If I get an two factor authentication requested on the MS Authenticator App iPhone, does that mean the MS live password has been compromised?

:)

 

App store and Microsoft account

Thank you for the advice

I see what you mean about the password but i think its a backward step to compromise my Microsoft password to to use the app store

 

Microsoft Account compromised

Hello Ade,

Thank you fo rposting your concern in Microsoft Community and welcome to the windows 10 Family.

From the description provided, I understand that the Microsoft Account you are using has been compromised which resulted in several security features barring you from making essential changes (including login).

If you are unable to access your primary account, you can use an alternate account (if you have one) or create a new one at https://signup.live.com

If it still does not help, follow the below steps and check if it helps.

• Sign in to your Microsoft account.
• Do one of the following:

A. If you can still sign in to your Microsoft account, you should change your password immediately. This will prevent anyone who knows your password from accessing the account. On the
Security & privacy page, tap or click Change password and then follow the instructions.

B. If you can't sign in to your account, your password may have been changed. Tap or click
Can't access your account? Select I think someone else is using my Microsoft account, tap or click
Next, and follow the instructions.

You can also go directly to the
Reset your password page, and follow the instructions.

Refer: Get back into your Microsoft account if it's been compromised

Write to us with the updated information for us to be able to assist you further.

Thank You.

 

MS Account Compromised

I received an alert this morning on my Android MS Authenticator app about unusual activity - a sign in attempt from Indonesia that was unsuccessful. My password has been compromised it seems (it's an old password I should have already changed) so I immediately
changed it to a new stronger password. Looking through recent activity there are a number of successful logins from Russia and Indonesia despite having 2FA enabled, reading the activity page they appear to have bypassed 2FA. I have never been to nor logged
in via VPN from these countries, this is 100% not me.

MS services I use include Xbox, Office365, Azure, OneDrive.

Given my current situation I have a few questions:

1. How can I check any current logged in sessions on my account, and forceably sign any out if needed? unless changing my password does this automatically (there is no 'this wasn't me' button for entries not under unusual activity, and that button just tells
me to change my password anyway)

2. How can I check for purchases/financial activity on my account across all MS services on 1 page?

3. How can I check for any security changes these attackers may have made? Obvious settings I have checked look fine so far

4. How have they successfully logged in when I have 2FA enabled!? Authenticator app, phone number and alternative email received no message, I can see one of their sign ins 'resolved unusual activity' - why did I receive no alert for this?

Any advice for other areas to check for activity or changes would be greatly appreciated.