Manage Security Alerts & Recent Sign-ins
This guide explains how to review your recent sign-in activity, detect suspicious access attempts, and manage security alerts for your Microsoft 365 account. Monitoring your activity regularly helps ensure your credentials remain secure.
1️⃣ View Recent Sign-ins
- Go to mysignins.microsoft.com.
- Select My Sign-ins from the left menu.
- Review each entry for:
- Date & Time of the sign-in
- Location (approximate from IP)
- Device or browser used
- If you find unfamiliar activity, click Report unfamiliar activity.
Tip: Bookmark mysignins.microsoft.com/security-info — this is your main dashboard for sign-in and authentication management.
2️⃣ Manage Security Alerts
- Visit portal.office.com and sign in.
- Click your profile picture → View account.
- Under Security info or Notifications, verify your alert preferences.
- Ensure your recovery email and phone number are accurate.
- Choose how you’d like to receive alerts (email, SMS, or Authenticator app).
3️⃣ Respond to a Security Notification
- If you receive an email or alert about suspicious activity:
- Do not click any links unless you’re certain it’s from Microsoft.
- Manually go to mysignins.microsoft.com to verify activity.
- Change your password immediately if you suspect unauthorized access.
Warning: Microsoft will never ask for your password or MFA code via email or phone.
Always verify messages using the official sign-in portal.
4️⃣ Review Devices and Sessions
- While signed in to mysignins.microsoft.com, open the Devices tab (if available).
- Sign out of any unfamiliar devices or sessions.
- Enable sign-in notifications for new or unknown devices.
Tip: Use the Microsoft Authenticator app’s “Device management” to remove old devices remotely.
5️⃣ Stay Protected
- Enable Multi-Factor Authentication (MFA) on all accounts.
- Keep recovery details (phone & alternate email) updated.
- Check My Sign-ins regularly for suspicious activity.
- Report phishing emails to your IT or security team.
Good Practice: Regular sign-in reviews and MFA usage can prevent over 99% of common account compromise attempts.