Poll of the Day > can i use a little help?

(+) Yeah! (+)

checked into my microsoft account, was surprised to see throughout the month there has been 6 attempted sign in's. from various countries using my email. which is my main email, but i haven't noticed anything unusual on my email, no spam in months, and haveibeenpwned always shows its cleared.

so i want to ask for suggestions and help. i changed my microsoft password, but then it said on my authenticator that i needed to use an app password or something but couldn't figure out how to do it. however it returned to normal, the authenticator so is it all set or do i need to do something more? so confused.

also, is there a way to create a new alias and delete my current email from it, without creating a new email? i use a different email as primary which is for microsoft and the authenticator, not sure how my main email was found out, i'm very cautious online. not sure if i need to be highly concerned or not, thank you!

You have nothing to worry about since your authenticator is set up. Some guy in some country used a DB of leaked passwords with your account, but failed because you have 2fa.

it doesn't even need to be a db of passwords, just one email leak is all it takes

they never got access to your account, likely never will.

you did everything correct, there's not much more you can do

thanks! the attempted log in's said they couldn't get the password let alone even to 2FA

i just don't understand what this needing to set up a new app password thing with the authy. don't think i had one before? i believe from how it sounds is its needed for apps that don't allow 2 step? i don't have any apps that use this, so safe to ignore?

also could they have been bots? the haveibeenpwned site shows no data breaches.

also it says in my google account after doing a dark web scan that my email hasn't been leaked either. just bots taking a guess at random? i haven't gotten spam in like half a year and even then it was always seldom as it was.

just really want to calm down and try to bounce back and not let my whole day go to ruin. i changed my gmail password as well this morning, first time in nearly two years, and saw on microsoft i could remove it as a sign in so hopefully that's all i need to do, hoping i don't need to go completely overboard and go changing everything today. :c

the other thing i just don't really get after changing my microsoft password which i hope can get explained is the needing a new app password for microsoft authy. read it last night and couldn't figure it out. just hope its safe to leave alone, it said its needed for apps that don't use 2 step, but i don't really use apps. don't remember this before, just worried i'll be locked out of my authy.

those things only check for known leaked lists, if your email is on a list that hasn't gone public in some form, then it's just not going to know

you really didn't need to do anything, 2fa is enough, since it would require any ne'er-do-well to have physical access to your device

ConfusedTorchic posted...

those things only check for known leaked lists, if your email is on a list that hasn't gone public in some form, then it's just not going to know

you really didn't need to do anything, 2fa is enough, since it would require any ne'er-do-well to have physical access to your device

will that mean there's a potential near future where i start getting aimed at more? all these attempted sign in's are from feb. although there hasn't been anything else suspicious this month besides me deciding to go into my account and seeing that mess.

RJP_X posted...

will that mean there's a potential near future where i start getting aimed at more? all these attempted sign in's are from feb. although there hasn't been anything else suspicious this month besides me deciding to go into my account and seeing that mess.

-cries- been so terrified all day, i cant stand it, i want to relax, but don't know how...

i just hope they were bots choosing a random email they made up and i wasn't actually leaked or anything.

i mean there's been nothing suspicious going on, until i seen all those attempted log-in's throughout the month last night. i wish they woudn't list it so i didn't have to know.

even through this i haven't been getting spam or any odd emails either.

now i been stressing myself out searching my passwords for sites to change, or accounts to delete, also since not every site allows 2 step as well.

i want to find peace for the next few hours i'm awake, and i'm sure... which i don't want, when i wake up i will be even worse with the anxiety and panic attacks, that's when those feelings really hit, as soon as i'm awake, oh dear god. :'c

RJP_X posted...

will that mean there's a potential near future where i start getting aimed at more? all these attempted sign in's are from feb. although there hasn't been anything else suspicious this month besides me deciding to go into my account and seeing that mess.

theres no telling unfortunately. Company leaks / hacks / breaches etc. happen all the time. Dunno what else youre signed up for with that email but essentially it can happen to any company.

youre doing good with a strong password and 2fa. Its about as much as you can do. Obviously be cautious of -all- emails you get, ie; inspect sender info and all links before clicking and definitely typing in credentials into said links if you happen to click.

but ultimately theres not much else you can do. So best to not really lose sleep over it bud

I don't know if I freaked you out or something. I get these e-mails too, trust me, they don't mean anything.

There are bot farms dedicated to doing nothing but this. emails accounts are not secret information and they never were designed to be. It's just trying "password1234" on a random e-mail it found.

Yellow posted...

I don't know if I freaked you out or something. I get these e-mails too, trust me, they don't mean anything.

There are bot farms dedicated to doing nothing but this. emails accounts are not secret information and they never were designed to be. It's just trying "password1234" on a random e-mail it found.

oh no, not you or anybody personally did, just felt all my accounts were doomed and the severity of my ocd makes me fixate on situations very badly. i always assume that any log in attempt, spam, ect. means your account is a ticking time bomb, it will be taken somehow, someway. i try to stay as very cautious online as i am able.

EvilResident posted...

theres no telling unfortunately. Company leaks / hacks / breaches etc. happen all the time. Dunno what else youre signed up for with that email but essentially it can happen to any company.

youre doing good with a strong password and 2fa. Its about as much as you can do. Obviously be cautious of -all- emails you get, ie; inspect sender info and all links before clicking and definitely typing in credentials into said links if you happen to click.

but ultimately theres not much else you can do. So best to not really lose sleep over it bud

yeah do how hard this has been on my mind today, i know i wont, but i wish i could wake up with a clearer mind, but it never works that way... if i could i'd love to wake up with a so fucking what mind set, and be like having my mind in better places but it has always seemed impossible to do sadly. thanks friend.

I know easier said than done but its true in this case. Hope you can rest easy tonight

hopefully my final concern, the other night when i tried signing in on my chromebook when all this happened it wanted me to hit a prompt on my phone instead of entering the microsoft authy code. i noticed this when looking in my microsoft account, that i don't even think i have my phone number in there.

just making sure its not any kind of phishing or weird shit. unless the reason i got the prompt is because i have microsoft authy? because yeah... did not see my phone number in the account. i guess i just didn't think i needed to since i'm only using microsoft for the authy.

https://gamefaqs.gamespot.com/a/forum/f/fac28429.png

oh china, you silly country you

anyways, this is my microsoft accounts sign in attempt list

and i am 100% not concerned, because unless someone steals my phone, they aren't getting in, it's just wasted compute cycles on their bot farm

ConfusedTorchic posted...

https://gamefaqs.gamespot.com/a/forum/f/fac28429.png

oh china, you silly country you

anyways, this is my microsoft accounts sign in attempt list

and i am 100% not concerned, because unless someone steals my phone, they aren't getting in, it's just wasted compute cycles on their bot farm

oh wow, that is certainly a lot more than me. damn fam. has the email they're trying to get into been leaked or compromised at all?

RJP_X posted...

hopefully my final concern, the other night when i tried signing in on my chromebook when all this happened it wanted me to hit a prompt on my phone instead of entering the microsoft authy code. i noticed this when looking in my microsoft account, that i don't even think i have my phone number in there.

just making sure its not any kind of phishing or weird shit. unless the reason i got the prompt is because i have microsoft authy? because yeah... did not see my phone number in the account. i guess i just didn't think i needed to since i'm only using microsoft for the authy.

i think if i can get an answer for this i will try and let it go, hopefully. this has been bugging me as well. hopefully i can try and end the night, and begin the next morning peacefully. i know how i get, i will dwell for weeks even months if i let it, i need some coping relaxation strategies i'm a mess with my nerves all the time.

RJP_X posted...

has the email they're trying to get into been leaked or compromised at all?

https://gamefaqs.gamespot.com/a/forum/0/07a45389.jpg

yep

ConfusedTorchic posted...

https://gamefaqs.gamespot.com/a/forum/0/07a45389.jpg

yep

-hugs- i'd be traumatized. :'c

well that's how my old aol is from my teens back then, just didn't know better back then. downloading many many albums and such with extraction, not torrent, but one of the sites had very bad malware and fucked a computer from then i learned my lesson, switched over to my current email and only use spotify and youtube for music now. still watch anime on the most popular, but still shady site.

i digress, even with everything that has happened with microsoft, on have i been pwned, i still have zero pwnage.

would you say nearly everyone has had some sort of compromised or leaked emails? your posts of what's happened to you bring me comfort, and i thank you for that, but also feel very sorry. :'c