137

Like the title says, I’ve got yesterday an email with a code to access my Microsoft account and that made me suspicious because I wasn’t trying to login to my account. When I looked at the login attempts I saw that someone else was trying to access my account, I changed my password, activated TFA. Thinking of going through and buying a physical key like yubico to further secure my account. Any tips are appreciated.

you are viewing a single comment's thread
view the rest of the comments
[-] Thrife@feddit.de 18 points 7 months ago

Happened to me too yesterday. Gave me a big bump to my evening plans. Luckily I too have 2fa activated via 2 different systems {SMS AND second Mail address). They cracked my randomly generated password - which doesn't surprise me that much, brute force cracker are pretty effective nowadays.

What bums me is that I used this as an argument to teach a friend but he just used the same ol' reliable "naah, I'm too lazy". Can't change him, just told him to think about using 2fa everywhere money is involved. The rest is up to him.

What's also pretty bad from MS is that yes you can use several different mailadresses but no you can't prevent that all of them can be used as login. One is compromised but also used for mail traffic so I can't just delete it. But also can't prevent it from logging in to the account. Thanks MS..

[-] Polkira@lemmy.ca 8 points 7 months ago* (last edited 7 months ago)

Hey so you actually can make it so an email address doesn't log into the account, it's how I stopped one particularly persistent hacking attempt when they finally managed to crack my password but were stopped by 2fa. Go to your profile > account info > sign in preferences, then as long as you have an alias email on the account you can deselect ones that you don't want to be able to be used as a log-in.

[-] stanka@lemmy.ml 3 points 7 months ago

With Microsoft I couldnt figure out how to enable 2fa against minecraft. Seems they do not have 2fa of any kind there and that is linked to your microsoft account. I guess the permissions there are just for minecraft, but if I was a betting man, I would venture there is a big hole there.

[-] Thrife@feddit.de 0 points 7 months ago

Oh, really?! Okay gonna try that, thanks for the Tipp!

load more comments (6 replies)
this post was submitted on 17 Feb 2024
137 points (96.6% liked)

techsupport

2240 readers
4 users here now

The Lemmy community will help you with your tech problems and questions about anything here. Do not be shy, we will try to help you.

If something works or if you find a solution to your problem let us know it will be greatly apreciated.

Rules: instance rules + stay on topic

Partnered communities:

You Should Know

Reddit

Software gore

Recommendations

founded 1 year ago
MODERATORS