Problem:
Many Outlook and Microsoft 365 users report getting repeated password reset emails, even when they haven’t requested one. This can feel alarming and raises concerns about account security.
Common causes include:
- Unauthorized login attempts – Hackers may be trying to reset your password using your email address.
- Phishing attempts – Fake password reset emails designed to trick you into clicking malicious links.
- Old apps or devices – Outdated email clients using Basic Authentication may keep failing login attempts and trigger reset prompts.
- Multiple failed sign-in attempts – Entering the wrong password too many times yourself can trigger Microsoft’s automated reset system.
- Linked accounts – If your email is connected to school, work, or third-party apps, incorrect login attempts there may cause reset emails.
Solution:
Here are the steps you should take to secure your account and stop unwanted reset notifications:
1. Verify if the Emails Are Real
- Genuine Microsoft reset emails come from account-security-noreply@accountprotection.microsoft.com .
- Fake phishing emails may have strange senders or suspicious links. Hover over any links before clicking.
- If in doubt, don’t click links in the email. Instead, go directly to account.microsoft.com .
2. Change Your Password Immediately
- If the reset emails are legitimate, it’s a sign someone may know your email and is trying to access your account.
- Create a strong, unique password with letters, numbers, and symbols.
- Don’t reuse old passwords.
3. Enable Multi-Factor Authentication (MFA)
- Set up the Microsoft Authenticator app or SMS verification.
- MFA ensures attackers can’t log in even if they know your password.
4. Check Account Activity
- Sign in at account.microsoft.com/security → Recent activity.
- Look for unfamiliar logins (different countries, devices, or times you don’t recognize).
- If you see suspicious activity, mark it as “This wasn’t me.”
5. Remove Old or Suspicious Apps/Devices
- Go to account.microsoft.com/devices to see which devices are connected. Remove unknown ones.
- In Security → Manage app passwords & sign-in options, revoke access for apps or services you don’t use anymore.
6. Be Cautious With Phishing Emails
- Cybercriminals often mimic Microsoft’s branding to steal passwords.
- If the reset email doesn’t look right, delete it.
- Report phishing emails by forwarding them to phish@office365.microsoft.com or phish@outlook.com .
Final Thoughts
Receiving multiple Microsoft password reset emails usually means either your account is being targeted by hackers or an app is repeatedly failing login attempts. The safest step is to secure your account immediately: reset your password, enable Multi-Factor Authentication, and check recent activity for suspicious logins.
By acting quickly and staying cautious of phishing scams, you can protect your Outlook or Microsoft 365 account from being compromised.
