The Recent activity page shows you when and where you've used your Microsoft account within the last 30 days. You'll see when you signed in to your account, and how you accessed the account—using a web browser, your phone, an email app, a third-party app, or another method.
You may see unusual activity. If you do, it's important to:
- check whether anyone else used your account
- let us know whether the activity was you or not
- secure your account
With your help, we can rule out false threats and block unauthorized access more quickly.
If you're concerned that someone might have access to your account, we strongly recommend that you change your password and update security settings. You can also remove all trusted devices on the Security settings page. To learn more about account management and security, see One place to manage your account.
Other information you may need to protect your account
- Find your IP address
- Get back into a compromised account or email
- Secure or close a Microsoft account
- Learn what to do about unexpected Microsoft charges
- Use two-step verification with your Microsoft account
- Fix Outlook email sync issues
- Manage your Xbox account or check a suspension. If your Xbox was stolen, contact the police and they can work with us to track the device location.
- Manage Skype security
- Manage your Microsoft family group
- View browser history in Microsoft Edge
How do I manage unusual activity?
We'll email you if we see unusual activity on your account. You can then use the Recent Activity page to check for unusual activity or to see more account activity. For each activity, you'll see the date and time, location, and type of activity.
You can click any activity to see other details, including:
- The IP address of the device on which the activity occurred
- The type of device or operating system used for the activity
- The internet browser or type of app used for the activity, if any
- If you choose This wasn't me, we'll help you to protect your account from unauthorized access. As part of this process, you'll be asked to change your password and to update your security info.
- If you choose This was me, it means your own activity is showing up as unusual. By choosing this option, you'll let us know we don't need to block your account. We may mark activity as unusual if you use your account on vacation, get a new device, or allow an app to sign in as you.
How do I manage recent activity?
Here are the types of activities you'll see on the Recent activity page.
|Session type||What it means|
|Account created||A Microsoft account was created.|
|Account name changed||The name that identifies you in Microsoft products and services has changed.|
|Additional verification requested||As an extra authentication step, you received a security code by text, email, or authenticator app.|
Primary alias changed
|An alias is an additional email address that uses the same inbox, contact list, and account settings as the primary alias (email address) for your Microsoft account. Learn more about aliases.|
|All security info marked for removal||All the security info for your account (like alternate email addresses, phone numbers, and authenticator apps) was scheduled to be removed. Learn more about replacing security info.|
Alternate email added;
Alternate email deleted;
Identity verification app added;
Identity verification app deleted;
Phone number added;
Phone number deleted;Recovery code added
|You've added or removed a piece of security info to your account. Learn more about security info.|
App password created;
App password deleted
|App passwords are used for apps or devices that don’t support two-step verification. Learn more about app passwords.|
|Automatic sync|| |
Your account automatically signs in as you, when you connect your Microsoft account to an app or service that manages emails. You'll see the same automatic sync activity at regular time intervals. You might also see these protocols if your email apps or webmail services use them:
|Incorrect password entered||Someone tried to sign in to your Microsoft account using the wrong password. We didn't allow this sign-in. (This might have been you, if you forgot your password—or it might have been someone else trying to access your account.)|
|Password changed||Your Microsoft account password has changed. If you didn’t do this, you should reset your password.|
|Password reset||You successfully reset your Microsoft account password.|
|Permission given to an application||You allowed another application to access your Microsoft account.|
|Profile info changed||Profile info such as your name, birth date, gender, country/region, or ZIP/postal code changed. Update your profile info.|
|Sign-in blocked (Account compromised)||We think someone else accessed your Microsoft account. We need you to provide some additional verification to unblock it.|
|Sign-in blocked (Account temporarily suspended)||We blocked your account because we noticed some suspicious activity. We need you to provide some additional verification to unblock it.|
|Successful sign-in||Someone signed in to your Microsoft account using the correct password. (This was probably you.)|
Two-step verification turned on;
Two-step verification turned off
|Two-step verification requires you to use two different methods of identity verification whenever you sign in. You can turn this feature on at any time. Learn more about two-step verification.|
|Unusual activity detected||Someone signed in to your account using the correct password, but from a location or device that we didn't recognize. To make sure it was you, we sent you a notification and required an extra security challenge. (This might have been you, but we weren't sure.)|