Sign-in activity
The Sign-in activity page lists recent sign-ins to your account, newest first, so you can check that they were all you.
What each entry shows
Section titled “What each entry shows”| When | Date and time of the attempt |
| Whether it worked | Failed attempts are listed too |
| Where | Approximate location, with a map |
| Device | Operating system and browser |
| Network | The IP address, and who it belongs to |
Failed attempts being included is the point. One failure is almost always you mistyping a password. A run of them from somewhere you have never been is worth acting on.
About the location
Section titled “About the location”The location comes from the IP address, so it is approximate. It usually lands on the right town or city, but a mobile connection can place you somewhere else entirely, and a VPN puts you wherever its server is.
Treat an unfamiliar city as worth a second look rather than proof of anything. An unfamiliar country, when you have not travelled or used a VPN, is worth acting on.
Delays and gaps
Section titled “Delays and gaps”New sign-ins take a while to appear. Microsoft can take a few hours to report one, so the sign-in you just made will probably not be listed yet. That is normal.
Only recent history is kept. Older sign-ins drop off after Microsoft’s retention period, so an empty or short list does not mean anything is wrong.
If you see something you do not recognise
Section titled “If you see something you do not recognise”- Change your password.
- Sign out everywhere, which ends every other session.
- Turn on multi-factor authentication if it is not on already.
- Email help@tophhie.cloud with the date and time of the sign-in you did not recognise.
Do those in that order. Signing out everywhere before changing the password just lets whoever it is sign straight back in.