Protect the sign-in and the device
Use the account and device practices approved for your work environment.
Use the organization's approved sign-in method. Do not share passwords or authentication codes, and do not approve a sign-in prompt you did not initiate. Lock a device when you step away, and keep work on devices approved for your role.
Exact sign-in, recovery, and device requirements can depend on your organization's approved environment. Follow its current instructions rather than improvising a recovery or security procedure.
If a sign-in does not look right
An unexpected authentication prompt appears
Do not approve it. If you initiated a sign-in, stop and verify through a known work channel before proceeding. If the prompt continues or you think someone else may be using your account, contact the approved IT or security route.
- Note when the prompt appeared.
- Do not share a one-time code or password in a message.
You may have shared account details
Use the approved urgent route promptly and explain what information may have been exposed and what you did. Follow the organization's account recovery instructions; do not rely on a message that prompted the disclosure.
- Do not include passwords or authentication codes in your report.
- Use the Urgent help page for the appropriate handoff.
Choose the right kind of help
Route descriptions identify responsibilities; use the actual routes approved by your organization.
| Situation | Next step |
|---|---|
| Routine device or sign-in question | Contact the organization's approved IT support route. |
| Unexpected prompt or possible account compromise | Use the approved urgent IT or security route promptly. |
| Concern began with a suspicious message | Use the approved suspicious-message reporting route; explain if account details were also shared. |
Related guidance
If the concern began with a suspicious message, review Suspicious messages. For a suspected account or device concern, use Urgent help to identify the appropriate handoff.