Managing Your Microsoft Account

Your Microsoft 365 account has a self-service portal where you can review your security settings, update contact info, check which devices have access, and review your sign-in history — all without contacting IT. This article walks you through each section.

 

🌐  Your account dashboard: Go to myaccount.microsoft.com and sign in with your work email and password. This is your starting point for everything in this article.

 

Your Account Portals at a Glance

Microsoft splits account management across several short URLs. Bookmark these - they are faster than navigating through menus:

 

Portal	URL	What you can do here
My Account	myaccount.microsoft.com	Your main account dashboard - security info, devices, sign-in activity, privacy settings, and app permissions
Security Info	aka.ms/mysecurityinfo	Add, update, or remove MFA methods and authentication contact info
Password Reset	aka.ms/sspr	Reset your password without contacting IT
My Sign-Ins	mysignins.microsoft.com	View your full sign-in history, flag suspicious activity
My Apps	myapps.microsoft.com	See and launch all apps your account has access to
My Groups	account.activedirectory.windowsazure.com/r#/groups	View the groups and teams your account belongs to

 

Part 1: Navigating My Account

When you arrive at myaccount.microsoft.com you will see a dashboard with tiles for each area of your account. Here is what each section contains:

 

• Security info: Your registered MFA methods - Authenticator app, phone number, backup email. This is where you add or update authentication methods.
• Devices: Every device that has signed into your work account. Review this regularly and remove anything you no longer use.
• Sign-in activity: A log of every time your account was accessed, including the app, device, location, and whether it succeeded or failed.
• Privacy: Controls for what data Microsoft collects and how it is used within your organization.
• App permissions: Third-party apps that have been granted access to your work account. You can review and revoke these here.
• Organizations: Shows which Microsoft 365 tenant (organization) your account belongs to.

 

Part 2: Updating Your Security Info (MFA Methods)

Keeping your security info current is one of the most important things you can do for your account. If your phone number changes, your Authenticator app breaks, or you get a new device - you may need IT support. 

 

How to access Security Info

1. Go to aka.ms/mysecurityinfo and sign in.
2. You will see a list of all authentication methods currently registered on your account.
3. Check that at least two methods are listed - if you only have one, add a second now.

 

Adding a new method

4. Click Add sign-in method.
5. Choose from the available options: Authenticator app, Phone (SMS or call), or Email.
6. Follow the on-screen prompts to verify and save the new method.

 

Removing or updating a method

7. Click the Delete or Change link next to any existing method.
8. You cannot remove a method if it is the only one registered — add a new one first, then remove the old one.

 

💡  Do this before you change phones. If you are getting a new phone, add your new device as an authentication method before you wipe your old one. Doing it after means you may be locked out. See the Setting Up Microsoft Authenticator article for step-by-step instructions.

 

🔴  Got a new phone number? Update it in Security Info immediately. If your old number is still registered and someone else gets that number assigned to them, they could potentially receive your MFA codes. Remove old phone numbers as soon as they are no longer yours.

 

Part 3: Viewing Your Devices

The Devices section shows every computer, phone, and tablet that has signed into your Microsoft 365 account. Reviewing this periodically helps you catch unauthorized access early.

 

How to view your devices

9. At myaccount.microsoft.com, click the Devices tile.
10. You will see a list of devices with their name, type, operating system, and last activity date.
11. Use the table below to decide what action to take for each device:

 

Situation	What to do
Device you recognise and still use	No action needed
Device you recognise but no longer use	Click Disable or Remove to clean up your account
Device you don't recognise	Click Disable immediately, change your password, and contact IT
Lost or stolen device	Click Disable immediately - this signs out all active sessions on that device. Contact IT for further steps.

 

💡  Tip: Device names in this list are set by Windows or the app - they may not be obvious. Look at the operating system, last activity date, and location to help identify them. If in doubt, disable and contact IT.

 

Signing out of all devices remotely

If you believe your account has been compromised or you want to sign out of everything at once:

12. Go to myaccount.microsoft.com → Security info.
13. Scroll to the bottom and click Sign out everywhere.
14. This immediately invalidates all active sessions across every device - you will need to sign back in on each one.
15. Change your password immediately afterward at aka.ms/sspr.

 

Part 4: Reviewing Your Sign-In Activity

Your sign-in history shows every time your account was accessed. Checking this occasionally is one of the best ways to catch unauthorized access before it becomes a serious problem.

 

How to access sign-in activity

16. Go to mysignins.microsoft.com or click the Sign-in activity tile at myaccount.microsoft.com.
17. You will see a log of recent sign-ins sorted by date, with the most recent at the top.
18. Use the table below to understand each field:

 

Field	What it tells you
Date and time	When the sign-in happened - check for any at unusual hours
Application	Which app was accessed (Outlook, Teams, OneDrive, etc.)
Status	Success or Failure - repeated failures you didn't cause are a red flag
IP address	The network the sign-in came from - an unfamiliar city or country is suspicious
Device	The device used - look for devices you don't recognize
Location	The geographic location derived from the IP address

 

What looks suspicious

• Sign-ins from a country or city you have never been to
• Sign-ins at 3am or other hours when you were not working
• Multiple failed attempts followed by a success you do not remember
• An app you do not recognize accessing your account
• A device name you do not recognize

 

How to flag a suspicious sign-in

19. Find the suspicious entry in your sign-in history.
20. Click on it to expand the details.
21. Click the This wasn't me button if the option is available.
22. Regardless of whether the button is available, contact IT immediately and change your password at aka.ms/sspr.

 

⚠️  Don't wait to report suspicious activity. Attackers who have access to your account can set up mail forwarding rules, access sensitive files, and use your identity to attack others in the organization. The faster IT is notified, the more damage can be limited.

 

Part 5: Revoking Access from a Lost or Stolen Device

If a device with your Microsoft 365 account signed in is lost or stolen, take these steps immediately - in this order:

 

23. Go to myaccount.microsoft.com → Devices.
24. Find the lost or stolen device and click Disable.
25. Go to myaccount.microsoft.com → Security info → Sign out everywhere to terminate all active sessions.
26. Go to aka.ms/sspr and change your password right away.
27. Contact IT Help Desk - they can check for any mail rules, forwarding, or other changes made during the window the device was compromised.
28. If the device was company-owned (not a personal device), also report it to your franchise owner.

 

💡  What disabling a device actually does: Disabling a device in My Account signs out that device from your Microsoft 365 account and prevents it from silently re-authenticating. It does not erase the device or lock Windows — only IT can perform a full remote wipe via Intune on enrolled devices. For unmanaged devices, changing your password is the most effective protection.

 

Part 6: App Permissions

When you connect a third-party app to your Microsoft 365 account — such as a scheduling tool, a form builder, or a productivity app — it receives a permission token to access parts of your account. Over time these can accumulate.

 

How to review and revoke app permissions

29. Go to myaccount.microsoft.com and click the App permissions tile (or go to My Apps at myapps.microsoft.com).
30. You will see a list of apps with access to your account and what they can do (e.g. read your email, access your calendar).
31. For any app you no longer use or do not recognize, click Revoke permissions.

 

💡  When to review: Check your app permissions once a year or any time you stop using a third-party tool. Unused app connections are a low-level security risk — they can be exploited if the third-party service is ever breached.

 

Part 7: Account Management Quick Reference

Bookmark these URLs for fast access to the tasks you will do most often:

 

• Add or update MFA / authentication methods: aka.ms/mysecurityinfo
• Reset your password: aka.ms/sspr
• Review devices with account access: myaccount.microsoft.com → Devices
• Check sign-in history: mysignins.microsoft.com
• Sign out of all devices: myaccount.microsoft.com → Security info → Sign out everywhere
• Review app permissions: myaccount.microsoft.com → App permissions
• Full account dashboard: myaccount.microsoft.com

 

✅  Monthly habit: Take 2 minutes each month to check mysignins.microsoft.com for anything unusual and myaccount.microsoft.com → Devices to remove anything you no longer use. These two checks catch the vast majority of account security issues before they escalate.

 

🛟  Still stuck? Contact the IT Help Desk. Have your username and a description of what you are trying to do ready.