Appearance
Summary
Microsoft 365 logs every sign-in to your account — including the time, location, device, and browser used. Reviewing this activity helps you spot unauthorized access and keep your account secure. This article explains how to check your sign-in history and report suspicious activity.
Before You Start
- A Microsoft 365 work or school account.
Instructions
1. Open the My Sign-Ins Page
Access your sign-in history directly.
- Open a web browser and go to https://mysignins.microsoft.com.
- Sign in with your Microsoft 365 account if prompted.
- The My Sign-Ins page displays a list of recent sign-in events.
2. Review Sign-In Details
Examine each entry for anything suspicious.
Each sign-in entry shows:
- Date and time — when the sign-in occurred.
- Location — city and country (approximate, based on IP address).
- Device / Browser — what was used to sign in (e.g., Chrome on Windows).
- App — which application was accessed (e.g., Outlook, Teams, SharePoint).
- Status — whether the sign-in was successful or failed.
Look for:
- Sign-ins from unfamiliar locations or countries.
- Sign-ins from unknown devices or browsers.
- Failed sign-in attempts you did not make.
- Sign-ins at unusual times (e.g., 3 AM on a weekend).
3. Report Suspicious Activity
Flag a sign-in you do not recognize.
- On the My Sign-Ins page, find the suspicious entry.
- Click Looks unfamiliar? next to the entry (if available).
- Follow the prompts to report the activity and secure your account.
- Change your password immediately:
- Go to https://mysignins.microsoft.com > Security info > Change password.
- Contact your IT department to report the incident.
4. Strengthen Your Account Security
After reviewing your activity, take preventive steps.
- Enable Multi-Factor Authentication (MFA) if not already active — see the related article below.
- Register additional MFA methods (phone, authenticator app) at https://mysignins.microsoft.com > Security info.
- Review registered devices and remove any you do not recognize.
- Fold this check into a wider routine — How to Run a Personal Security Checkup in 15 Minutes covers sign-in activity alongside mailbox rules, connected apps, and recovery details in a single pass.
Troubleshooting
INFO
VPN usage can make sign-in locations appear inaccurate. If you use a company VPN, your sign-in location may show the VPN server's location rather than your actual location.
| Symptom / Error | Potential Cause | Solution |
|---|---|---|
| Sign-in from an unfamiliar location | VPN or proxy server in use | Check if you were connected to a VPN at the time. If not, this may be unauthorized access — change your password, then report it to IT with the date, time, and location exactly as the log shows them. |
| Multiple failed sign-in attempts | Someone trying to guess your password | Change your password immediately. Enable MFA if not already active. |
| "My Sign-Ins page" not available | Organization has not enabled the feature | Contact your IT administrator to enable My Sign-Ins for your tenant. |