Windows 10: Question about Microsoft account security

Hey guys.

So I logged into my MS account randomly to check my recent activity. A bit of paranoia since a few months ago I had some dude trying to hack literally every account I own under the sun. (Seriously. Even useless crap like my Spotify or Town of Salem accounts)

So anyway, I saw a sign-in I didn't recognize... however I got ZERO verifications.

What I mean is, I have multi-factor verification enabled so to get into my account I either need to get a text with a code, or an email with a code.

Neither of these things happened, but apparently there was a successful sign in.

Here's the weirder part. In the MS account feed, it will tell you what happened during that session. So for example it will say "Successful sign in. Verification requested. Password changed" and so on.

The unknown sign in had "additional verification requested" listed about 10 times with no other activity.

So here's my concern... is there some way for people to just spam the verification thing and get some back door or set up a new verification method? Because from what it seems, that's the only way they could have successfully logged in. If so, is there some way to prevent this?

Thanks.

submitted by /u/Cirkusleader
[link] [comments]

:)

 

Local account installation question

I'm fairly certain that Skip this step was available in 10.0.130 - the workaround in Step 20 (back button) is no longer required.

The currently known, as of 10.0.130, ways to create a Local account sign-in are

• Skip this step at the MS account creation phase
• No Internet connection during the install
• static IP (post# 2 by Fragment) - New (to me anyway)

 

Microsoft account - Are security questions removed after I enabled the 2-step verification?

Hello,

Thank you for contacting Microsoft Community.

We understand your concern in this regard.

Generally, a security question is helpful to recover your Microsoft account password, when you lose access to it. Enabling Two-step verification won't effect your security question, instead it is an advanced security feature that makes it harder for someone
to break in to your account with just a stolen password. To replace your security info

• 
  Go to
  Security settings, and sign in with your Microsoft account.
  
• 
  If you’re asked to enter a security code to continue, and you can’t get that code, choose
  I don't have any of these or I can't verify my account from the drop-down list, then follow the instructions to reset your security info.
  
• 
  On the Security settings page, your security info is under Security info helps keep your account secure. Choose
  Remove for any you want to remove. You may be prompted to add new security info before you can remove the old info.
  

If you remove all of your security info, there’s a 30-day wait during which we help protect sensitive parts of your account so nobody can change your security settings or use your payment options. During this period you can still use your email, Skype,
OneDrive, and devices as usual. After the 30 days, you’ll be notified that the wait is over and it’s time to enter new security info.

Learn more

• 
  Two-step verification
  
• 
  App passwords
  
• 
  Trusted devices
  
• 
  Security info & security codes
  

Keep us posted if you require further assistance.

 

Windows 8 with 2 Microsoft accounts?

You could create a secondary account that is Microsoft account and leave the current one as it is. And it should only sync the Microsoft acc. eneabled user and you can still have your old things as they always were, in case you question MS security and what they might collect about you.