Like the title says, I’ve got yesterday an email with a code to access my Microsoft account and that made me suspicious because I wasn’t trying to login to my account.
When I looked at the login attempts I saw that someone else was trying to access my account, I changed my password, activated TFA.
Thinking of going through and buying a physical key like yubico to further secure my account.
Any tips are appreciated.
I have an account that has been having that same behaviour for years. I changed my password multiple times after and have 2fa. I was uneasy at the time but realized the best I could do is move on from those accounts as main accounts and just keep them locked tight.