The recent activity page shows info about when and where you've used your Microsoft account within the last 30 days. This includes any time that you signed in to your account, whether you used a web browser, your phone, an email app, a third-party app, or another method. See your recent activity.
What info is available?
For each activity, the recent activity page lists the date and time, location, and type of activity. Keep in mind that if you use a mobile device, your location may not be reliable. This is because mobile phone services route your activity through different locations. This can make it look like you signed in from somewhere you're not.
You can click any activity to expand it and see additional details, including:
- The IP address of the device on which the activity occurred
- What type of device or operating system was used
- What internet browser or type of app, if any, was used
How do I use this page?
Manage your unusual activity
If there is unusual activity on your account, we should already have notified you through email. Review the session and decide This was me or This wasn't me.
If we accidentally flag your activity as unusual, make sure you let us know that it was you. For example, this might happen if you use your account on vacation, get a new device, or allow an app to sign in as you.
Manage your recent activity
What if some recent activity doesn't show up?
What are the different session types?
This table explains all the activities that are tracked in the recent activity page.
|Session type||What it means|
|Account created||A Microsoft account was created.|
|Account name changed||The name that identifies you in the Microsoft products and services you use has changed.|
|Additional verification requested||As an extra authentication step, you received a security code by text, email, or authenticator app.|
Primary alias changed
|An alias is an additional email address that uses the same inbox, contact list, and account settings as the primary alias (email address) for your Microsoft account. Learn more about aliases.|
|All security info marked for removal||All the security info for your account (like alternate email addresses, phone numbers, and authenticator apps) was scheduled to be removed. Learn more about replacing security info.|
Alternate email added;
Alternate email deleted;
Identity verification app added;
Identity verification app deleted;
Phone number added;
Phone number deleted;Recovery code added
|A piece of security info for your account was added or deleted. Learn more about security info.|
App password created;
App password deleted
|App passwords are used for apps or devices that don’t support two-step verification. Learn more about app passwords.|
|Incorrect password entered||Someone tried to sign in to your Microsoft account with the wrong password. We didn't allow this sign-in. (This might have been you, if you forgot your password—or it might have been someone else trying to access your account.)|
|Password changed||Your Microsoft account password was changed. If you didn’t do this, you should reset your password.|
|Password reset||Your Microsoft account password was successfully reset.|
|Permission given to an application||You allowed another application to access your Microsoft account.|
|Profile info changed||Profile info such as your name, birth date, gender, country/region, or ZIP/postal code was changed. Update your profile info.|
|Sign-in blocked (Account compromised)||We think that someone else accessed this Microsoft account. We required additional verification and a password change.|
|Sign-in blocked (Account temporarily suspended)||We noticed suspicious activity on your account, so required additional verification to unblock it.|
|Successful sign-in||Someone signed in to your Microsoft account with the correct password. (This was probably you.)|
Two-step verification turned on;
Two-step verification turned off
|Two-step verification uses two ways to verify your identity whenever you sign in. You can turn it on or off whenever you want. Learn more about two-step verification.|
|Unusual activity detected||Someone signed in to your account with the correct password, but from a location or device that we didn't recognize. We sent you a notification and required an extra security challenge. (This might have been you, but we weren't sure.)|
Email apps and webmail services use different protocols, or communication formats, to access your account. You might see one or more of the following protocols listed in your recent activity:
Exchange ActiveSync: Syncs email, calendar, and contacts between your devices and your Outlook.com account.
Post Office Protocol 3 (POP3): Allows an app or service to access email messages in your inbox.
Simple Mail Transfer Protocol (SMTP): Allows an app or service to send email.
Internet Message Access Protocol (IMAP): Allows an app or service to access all email (in all folders) and sync email across your devices.