Windows 10: What steps should I take to further secure my Microsoft account if its under threat from...

ro G_267 · Apr 7, 2025

I received a mail yesterday giving me a pass code to login into my Microsoft account. However, I never tried logging in yesterday. When I actually logged in, I found that there have been unsuccessful login attempts almost every day to my Microsoft account. I have taken some security measures. Could Microsoft recommend give me any suggestions? Also is my email address compromised as well?

:)

Brink · Apr 7, 2025

Microsoft: Additional steps to help keep personal information secure

We’re committed to helping our users keep their personal information secure and private. A key part of our work is identifying and preventing unauthorized access to your Microsoft Account (including Outlook.com email and OneDrive) by anyone other than you.

We’re taking an additional step today. We will now notify you if we believe your account has been targeted or compromised by an individual or group working on behalf of a nation state.

We already notify users if we believe their accounts have been targeted or compromised by a third party, and we provide guidance on measures users can take to keep their accounts secure. We’re taking this additional step of specifically letting you know if we have evidence that the attacker may be “state-sponsored” because it is likely that the attack could be more sophisticated or more sustained than attacks from cybercriminals and others. These notifications do not mean that Microsoft’s own systems have in any way been compromised.

If you receive one of these notifications it doesn’t necessarily mean that your account has been compromised, but it does mean we have evidence your account has been targeted, and it’s very important you take additional measures to keep your account secure. You should also make sure your computer and other devices don’t not have viruses or malware installed, and that all your software is up to date.

The evidence we collect in any active investigation may be sensitive, so we do not plan on providing detailed or specific information about the attackers or their methods. But when the evidence reasonably suggests the attacker is “state sponsored,” we will say so.

There are some important steps that everyone should take to help keep their Microsoft Account and their online personal information secure including:

Turn on two-step verification: This makes it harder for hackers to access your account even if they guess your password because if they try to sign in on a device Microsoft doesn’t recognize, we’ll ask for an extra security code (which you can get from a special app on your phone, sent to a different email address or via SMS text message).

Use a strong password and change it often: Make sure your password contains a mix of letters, numbers and symbols, isn’t a complete word and is different than the password you use on other sites. Be sure to change your password often.

Watch for suspicious activity on your account: The “Recent Activity” page on your Microsoft Account shows recent sign-ins and changes to your account, and allows you to let Microsoft know if you were not the person making these changes.

Be careful of suspicious emails and websites: Don’t open emails from unfamiliar senders or email attachments that you don’t recognize. Be careful when downloading apps or files from the Internet, and make sure you know the source.

Keep your computer software, including your Web browser, up to date and run an up-to-date anti-virus program: For Windows PCs, you should turn on Windows Update to ensure your PC and Microsoft software stay up to date. You should install a reputable anti-virus/ anti-malware software. Both Windows 8.1 and Windows 10 already include free anti-malware software called Windows Defender.

You can read more about the steps you can take to better protect your personal data and make any necessary changes on the Microsoft Account Security Page.
Click to expand...

Source: Additional steps to help keep your personal information secure - Microsoft on the Issues

Yashwanth Kotakuri · Apr 7, 2025

Microsoft account - Are security questions removed after I enabled the 2-step verification?

Hello,

Thank you for contacting Microsoft Community.

We understand your concern in this regard.

Generally, a security question is helpful to recover your Microsoft account password, when you lose access to it. Enabling Two-step verification won't effect your security question, instead it is an advanced security feature that makes it harder for someone
to break in to your account with just a stolen password. To replace your security info

Go to
Security settings, and sign in with your Microsoft account.

If you’re asked to enter a security code to continue, and you can’t get that code, choose
I don't have any of these or I can't verify my account from the drop-down list, then follow the instructions to reset your security info.

On the Security settings page, your security info is under Security info helps keep your account secure. Choose
Remove for any you want to remove. You may be prompted to add new security info before you can remove the old info.

If you remove all of your security info, there’s a 30-day wait during which we help protect sensitive parts of your account so nobody can change your security settings or use your payment options. During this period you can still use your email, Skype,
OneDrive, and devices as usual. After the 30 days, you’ll be notified that the wait is over and it’s time to enter new security info.

Learn more

Two-step verification

App passwords

Trusted devices

Security info & security codes

Keep us posted if you require further assistance.

Brink · Apr 7, 2025

Google strengthening 2-Step Verification for Google account

What’s changing

Starting on July 7, 2020, we will make phone verification prompts the primary 2-Step Verification (2SV) method for all eligible users, unless they are already using security keys as their 2SV method of choice. This means that if you sign in to your Google account and are also signed in on a smartphone, you will be asked to follow phone prompts to verify the login attempt. This will help increase account security while making it easier to sign in.

This won’t apply if you use a security key to protect your account. You’ll also still be able to use other methods (such as a code received by text) by selecting a different method during the phone prompt verification steps.

Phone prompts verify your sign-in attempt via your smartphone

Who’s impacted

End users

Why it’s important

Phone prompts, also known as “on-device prompts,” are more secure than text or voice codes as a form of 2-Step Verification. They’re also easier to use, as they avoid requiring users to manually enter a code received on another device. By making prompts the primary method for more users, we hope to help them take advantage of the additional security without having to manually change settings—though they can still use other methods of 2-Step Verification if they prefer.

Additional details

How phone prompts work

After you enter your password to sign in to your Google Account, Google sends a "Trying to sign in?" prompt to every eligible mobile device where you’re signed in. This prompt tells you when and where your password was entered, and then asks you to confirm or block the sign-in attempt by simply tapping your mobile device. You can still select a different verification method during sign-in if one is available on your account. You’ll also stop receiving prompts on a phone if you sign out of that phone. Learn more about phone prompts.

Users with security keys are excluded from this change

Users will not have prompts as their primary 2SV method in two situations:

If an organization enforces the “Only security key” 2-Step Verification option for a user, there will be no change and the user will continue to be required to use security keys.

If a user currently has, or at any point in the future adds, a security key on their account, the security key verification will be presented as the primary method.

Additionally, if a user doesn’t have 2-Step Verification turned on, this will not apply.

Getting started

Admins: This feature will be ON by default. Admins can only disable the feature by requiring the use of security keys. Visit the Help Center to learn more about protecting your business with 2-Step Verification.

End users: This feature will be ON by default and can be disabled by the user. Visit the Help Center to learn more about signing in with 2-Step Verification.

Rollout pace

Rapid and Scheduled Release domains: Gradual rollout (up to 15 days for feature visibility) starting on July 7, 2020

Availability

Available to all G Suite customers and users with personal accounts.

Click to expand...

Source: https://gsuiteupdates.googleblog.com...e-prompts.html

Windows 10: What steps should I take to further secure my Microsoft account if its under threat from...

What steps should I take to further secure my Microsoft account if its under threat from...

What steps should I take to further secure my Microsoft account if its under threat from...

What steps should I take to further secure my Microsoft account if its under threat from...

What steps should I take to further secure my Microsoft account if its under threat from... - Similar Threads - steps should further

What steps should I take to further secure my Microsoft account if its under threat from...

I can't delete MySql from the programdata, what steps should I take

I can delete MySql from the programdata, what steps should I take

I can delete MySql from the programdata, what steps should I take

I can delete MySql from the programdata, what steps should I take

What steps should I take if Windows Security is unable to remove a virus from my system?

What steps should I take if Windows Security is unable to remove a virus from my system?

What steps should I take if Windows Security is unable to remove a virus from my system?

Windows can't find my camera. What steps should I take to correct this?