Solved Microsoft Account Security (Windows 11 Version 23H2 (OS Build 22631.4037)

antspants · Aug 17, 2024

Hi, It happens to everyone.
You can strengthen your security at Microsoft if you choose to in the security section of your account at Microsoft.

garlin · Aug 17, 2024

Yes, it happens to practically everyone. Most MS Accounts are probed by bots all over the world, where local ISP's are more lax about hosting bad actors. It's been happening for me for the last 15 years (least when MS rolled out this security view). I even see their password reset requests. My email's been leaked at least 10 times by now, from every major company that gets hacked.

If you have very strong (random) passwords, and enabled 2FA with an authenticator, then you've done everything possible.

Dez · Aug 17, 2024

antspants said:
Hi, It happens to everyone.
You can strengthen your security at Microsoft if you choose to in the security section of your account at Microsoft.

Hi thanks for the quick response. That's set my mind at rest. I think I've got the strongest security set up that I can have. So no more sleepless nights for me.

Dez

Dez · Aug 17, 2024

garlin said:
Yes, it happens to practically everyone. Most MS Accounts are probed by bots all over the world, where local ISP's are more lax about hosting bad actors. It's been happening for me for the last 15 years (least when MS rolled out this security view). I even see their password reset requests. My email's been leaked at least 10 times by now, from every major company that gets hacked.

If you have very strong (random) passwords, and enabled 2FA with an authenticator, then you've done everything possible.

Thanks garlin for the reassurance. I suppose if my e-mail address has been leaked and is out in the wild then I should expect attempts to compromise it. I hadn't considered your explanation of bots probing accounts and yes I too have seen unsuccessful password reset requests. Phew!. I'd thought it was just me who was being targeted.

Your reply has lowered my paranoia level to normal.

Dez

echo2446 · Aug 17, 2024

Hello,

To stop the problem of having your account probed by email, you may be able to change the email address as a primary login alias (check out "Change sign-in preferences"). Plus addressing doesn't work for Microsoft, but if you use gmail, adding periods between the characters would work. You can also use a reliable aliasing service too. Bitwarden integrates with SimpleLogin, Firefox Relay, addy.io, and DuckDuckGo.

bikemanI7 · Aug 17, 2024

I've activated on mine 2 Factor Autenication via Authenicator app, Changed my Microsoft Account Password to harder one. and Use a Password Manager, that is renewed til 2/21/2026 lol, so i don't have to worry on that for a while lol

So think I Myself is as secure as gonna be

antspants · Aug 17, 2024

I have various authentication methods. This is via my Microsoft Authenticator app, which you can use to update security methods.

Screenshot 2024-08-18 at 9.05.21 AM.jpeg

antspants · Aug 17, 2024

The one I most use for my accounts is “Send sign in notification”
A number is presented on sign in, confirm the correct number out of three choices. Sign in completed. Very quick, automated account entry on computer when confirming the correct number on my phone.

Screenshot 2024-08-18 at 9.06.32 AM.jpeg

Dez · Aug 18, 2024

echo2446 said:
Hello, . . . . You can also use a reliable aliasing service too. Bitwarden integrates with SimpleLogin, Firefox Relay, addy.io, and DuckDuckGo.

Thanks for the advice @echo2446. I've played around with Firefox Relay and DuckDuckGo in the past. I'll have a closer look when I have some time.

Dez

Ghot · Aug 18, 2024

@Dez

Microsoft is a very large and desirable target for hackers. Most normal folks are not.

Personally, I have a Microsoft account but I don't have it tied to Win 10 or Win 11.
For some, this would be a problem. I don't use Microsoft programs like Office 365, Azure, One Drive... etc., so I don't really need to tie my operating system to my Microsoft account.

And... even with my MS account NOT tied to Windows, I still see the attempts from all over the world to login to my MS account.
This, and the fact that everyone sees this on their MS accounts, shows that the attempts are aimed at Microsoft and not at me specifically.

These days you pretty much have to trust that large, desirable organizations have their own security locked down pretty well. If we can't do that, then we should probably shouldn't be using computers. ^^

/edit

Now if you start making millions or billions of dollars a quarter, some day... then it would be a good idea to invest in commercial grade security and invest in a cyber security department of your own.

Dez · Aug 18, 2024

antspants said:
The one I most use for my accounts is “Send sign in notification”
A number is presented on sign in, confirm the correct number out of three choices. Sign in completed. Very quick, automated account entry on computer when confirming the correct number on my phone.

View attachment 105300

Thanks @antspants. I use similar authentication methods.

I use Microsoft Authenticator with the added security of having to use fingerprint verification on my phone.

Dez

Dez · Aug 18, 2024

Ghot said:
@Dez

. . . . . . . even with my MS account NOT tied to Windows, I still see the attempts from all over the world to login to my MS account.
This, and the fact that everyone sees this on their MS accounts, shows that the attempts are aimed at Microsoft and not at me specifically.

Thanks @Ghot. I did wonder if it was aimed at my particular MS account. The replies that I've had here have put my mind at ease. I have a few MS accounts and only one was subject to probing. When I checked, this was the only e-mail address that had been exposed in known data breaches. The others had not been exposed.

Dez