How to Check Your Microsoft 365 Sign-in Activity for Unusual Login Locations

Regularly reviewing your Microsoft 365 sign-in activity is an effective way to monitor account security. By checking where and when your account has been accessed, you can quickly identify unauthorised access attempts from unfamiliar locations or devices. If you spot suspicious activity, you can take immediate steps to secure your account and protect your business data.

Detailed Instructions

Step 1: Sign in to Your Microsoft Account

1. Open your web browser and go to account.microsoft.com.
2. Enter your Microsoft 365 email address and password.
3. Complete any multi-factor authentication prompts if required.

Step 2: Access Recent Activity

1. Once signed in, select Security from the top navigation menu.
2. Under the Security dashboard, locate and click Recent activity.
3. You may be asked to verify your identity again for security purposes.

Step 3: Review Sign-in Locations

1. Scan the list of recent sign-in events. Each entry shows the date, time, location, device type, and browser or app used.
2. Look for sign-ins from cities or countries you haven't visited, or at times when you weren't working.
3. Click on any entry to view more details, including the IP address and approximate location on a map.

Step 4: Respond to Unusual Activity

1. If you recognise the activity, select This was me to confirm it.
2. If you do not recognise the activity, select It wasn't me.
3. Follow the on-screen prompts to review recent changes and secure your account.

Step 5: Secure Your Account

1. Select Change password and create a strong, unique password.
2. Ensure multi-factor authentication is enabled under Advanced security options.
3. Review and remove any unfamiliar trusted devices or app passwords.

Troubleshooting

I Can't Access Recent Activity

• Ensure you are signed in with the correct Microsoft 365 email address associated with your organisation.
• Clear your browser cache and cookies, then try again.
• If your organisation manages sign-in logs through Azure AD, you may need to contact your IT administrator for access.

The Location Doesn't Match My Actual Location

• Sign-in locations are based on IP address and may not be precise, especially if you are using mobile data or a VPN.
• Check the device and app details to verify if the sign-in was initiated by you.

I Don't See the "It Wasn't Me" Option

• This option may not appear for older sign-in events. Focus on recent activity within the last 30 days.
• If you cannot secure the account through the portal, contact your IT support team for assistance.