Checking your recent sign-ins

A strange notification, an email in Sent Items you didn't send or a sign-in request you don't recognise? Then check where and when someone signed in to your account. Microsoft shows your recent sign-ins with location, device and app. This article shows where to find that and what to do about a suspicious sign-in.

With a work or school account

  1. Go to mysignins.microsoft.com (or myaccount.microsoft.com > Recent activity).
  2. You see each sign-in with date, location, device and whether it succeeded.
  3. Select a sign-in for details such as the IP address and app.

Don't recognise a sign-in? Choose the option to secure your account on that sign-in and change your password immediately.

Reviewing recent sign-ins on My Sign-Ins

With a personal Microsoft account

Go to account.microsoft.com > Security > Sign-in activity. There, too, you see the location of each sign-in and can report that it wasn't you.

Be careful with locations

Location is based on your IP address and isn't always precise. Mobile data or a VPN can make a sign-in look like another city or even another country. Focus on the device and the time.

Suspicious sign-in: what now?

  1. Change your password. Read change your password.
  2. Sign out everywhere: myaccount.microsoft.com > Sign out everywhere.
  3. Review your security info at aka.ms/mysecurityinfo and remove methods you don't recognise.
  4. Check Outlook for rules that forward or delete email.
  5. Tell your IT department.

For admins

In entra.microsoft.com > Monitoring > Sign-in logs you see every sign-in in your organisation. Entra ID P2 adds risky sign-ins. Related: Have I Been Pwned and enable MFA.

Read also

Have I Been Pwned: check whether your email is in a data breach
Change or reset your password in Microsoft 365
Enable multi-factor authentication (MFA) in Microsoft 365

Nederlandstalige versie: Controleren waar en wanneer er op je Microsoft-account is aangemeld

share on LinkedIn ☕ buy me a coffee

More in English

▸Have I Been Pwned: check whether your email is in a data breachCheck on Have I Been Pwned whether your email address or password is in a data breach, and what to do if it… ▸How to remove a device from your Microsoft account or Microsoft 365 accountRemove a device from your personal Microsoft account or work account, sign out of Office on an old device,… ▸Enable passwordless sign-in in Microsoft 365 in 3 stepsLet users sign in without a password using passkeys in Microsoft Authenticator, FIDO2 keys or Windows Hello.… ▸Security defaults in Microsoft Entra ID: what they do and how to enable themWhat security defaults in Microsoft Entra ID (formerly Azure AD) do, who they are for, how to turn them on or…