Keeping your Microsoft Account more secure against attacks

Microsoft is stepping up the monitoring of your Microsoft account and will now alert you if it is being targeted by state sponsored attackers.

Richard Hay, Senior Content Producer

December 31, 2015

3 Min Read
Keeping your Microsoft Account more secure against attacks

Security is an ever changing target.

As technologies improve to help us maintain a higher level of security new methods are being developed to take advantage of those new processes.

Expecting our security posture to be strong as we stand still when it comes to that security is a self defeating effort.

Take our Microsoft Accounts as an example. Microsoft already monitors those accounts, which provide the core connectivity to everything we do and access with Microsoft, to make you aware if any attempts are made to access your account.

In the past we never knew if these were sophisticated attacks or just random but Microsoft has now decided to let us know if they determine these attacks are coming from hackers who are working for a nation state.

We’re taking this additional step of specifically letting you know if we have evidence that the attacker may be “state-sponsored” because it is likely that the attack could be more sophisticated or more sustained than attacks from cybercriminals and others. These notifications do not mean that Microsoft’s own systems have in any way been compromised.

According to Microsoft, this does not mean they will give is details on who is targeting our accounts however, by letting us know it is a more sophisticated type of attack, we can then take additional steps to protect our Microsoft Account and computer systems.

Microsoft recommends the following actions to help increase the security of your accounts and computers:

  • Turn on two-step verification: This makes it harder for hackers to access your account even if they guess your password because if they try to sign in on a device Microsoft doesn’t recognize, we’ll ask for an extra security code (which you can get from a special app on your phone, sent to a different email address or via SMS text message).

  • Use a strong password and change it often: Make sure your password contains a mix of letters, numbers and symbols, isn’t a complete word and is different than the password you use on other sites. Be sure to change your password often.

  • Watch for suspicious activity on your account: The “Recent Activity” page on your Microsoft Account shows recent sign-ins and changes to your account, and allows you to let Microsoft know if you were not the person making these changes.

  • Be careful of suspicious emails and websites: Don’t open emails from unfamiliar senders or email attachments that you don’t recognize. Be careful when downloading apps or files from the Internet, and make sure you know the source.

  • Keep your computer software, including your Web browser, up to date and run an up-to-date anti-virus program: For Windows PCs, you should turn on Windows Update to ensure your PC and Microsoft software stay up to date. You should install a reputable anti-virus/ anti-malware software. Both Windows 8.1 and Windows 10 already include free anti-malware software called Windows Defender.

Of course, one other element of protecting yourself and your systems is smart computing habits. Engaging the gray matter between your mouse finger and brain is critical and, in my opinion, the most important aspect of security because even the most vigilant of us can still be caught off guard.

There is no reason to make it easy for the bad guys by making poor choices when we are using our computers because that will only open up the opportunities for our security to be broken.

What steps do you take to increase your own personal computing security?

But, wait...there's probably more so be sure to follow me on Twitter and Google+.

Read more about:

Microsoft

About the Author

Richard Hay

Senior Content Producer, IT Pro Today (Informa Tech)

I served for 29 plus years in the U.S. Navy and retired as a Master Chief Petty Officer in November 2011. My work background in the Navy was telecommunications related so my hobby of computers fit well with what I did for the Navy. I consider myself a tech geek and enjoy most things in that arena.

My first website – AnotherWin95.com – came online in 1995. Back then I used GeoCities Web Hosting for it and WindowsObserver.com is the result of the work I have done on that site since 1995.

In January 2010 my community contributions were recognized by Microsoft when I received my first Most Valuable Professional (MVP) Award for the Windows Operating System. Since then I have been renewed as a Microsoft MVP each subsequent year since that initial award. I am also a member of the inaugural group of Windows Insider MVPs which began in 2016.

I previously hosted the Observed Tech PODCAST for 10 years and 317 episodes and now host a new podcast called Faith, Tech, and Space. 

I began contributing to Penton Technology websites in January 2015 and in April 2017 I was hired as the Senior Content Producer for Penton Technology which is now Informa Tech. In that role, I contribute to ITPro Today and cover operating systems, enterprise technology, and productivity.

https://twitter.com/winobs

Sign up for the ITPro Today newsletter
Stay on top of the IT universe with commentary, news analysis, how-to's, and tips delivered to your inbox daily.

You May Also Like