Which signal brought you here?
Choose what made you suspicious. Each route shows where to look first and what actually cuts off someone else.
There's a console on my devices list that isn't in my home.
- Compare it with your own console names
- Change your Microsoft account password
- Sign out everywhere skips consoles 24h
Rule out a family console first. If it isn't yours, change your password: Xbox Support says that alone protects a profile saved on an Xbox One or Series X|S. Sign out everywhere doesn't reach Xbox consoles.
Your signal, step by step
Choose what you noticed. Each route names the Microsoft or Xbox page to open and what it can and can't do.
Six signals to check on your own account
Read them together. If you're not sure an entry was you, Microsoft says to choose “This wasn't me”.
- Recent activity. It shows when and where your Microsoft account was used in the last 30 days. Microsoft may ask for a security code before it opens. Locations come from IP addresses and are approximate, and mobile networks can route you through another city, so look for consistency rather than an exact place.account.microsoft.com → Security → Sign-in activity → View my activity
- Unusual activity entries. Expand an entry in the Unusual activity section to see the two choices, “This was me” and “This wasn't me”. If you're not sure, Microsoft says to choose “This wasn't me”; you'll be asked to change your password and update your security info.
- Alert emails and texts. When Microsoft sees a sign-in from a new location or device, it sends an email and a text. A genuine email comes from account-security-noreply
@accountprotection.microsoft.com. You can always open your account yourself instead of clicking a link in the message. - Consoles and devices. Your devices list shows the consoles and PCs linked to the account. Check what your own console is called, so you can tell it apart from one you don't know.account.microsoft.com/devicesOn the console: Settings → System → Console info → Name
- Orders and payment methods. A purchase or a card you didn't add is a signal too; our unauthorized Xbox charge guide covers checking and disputing it.account.microsoft.com → Payment & billing → Order history
- Your info and aliases. Open each link under Your info and look for a sign-in email or phone number you didn't add.account.microsoft.com → Your info → Manage how you sign in to Microsoft → Account alias
Was it really someone else?
Select what you found on your own account. Don't type any details here.
Select what you found to see the next step.
A rough guide only: Microsoft's own advice is to choose “This wasn't me” whenever you're unsure. Nothing you select leaves this page.
Confirmed it wasn't you? Secure the account in 5 steps
Do these in order, on account.microsoft.com and on your own console. They need you to be signed in; if you can't sign in any more, use the hacked Xbox account guide instead.
- Clean up your security info. On the Advanced security options page, remove any phone, email or app you didn't add. Add a new method first, so you never remove them all: changing all your security info at once can restrict the account for 30 days.account.microsoft.com/security → Advanced security options → expand the method → Remove
- Change your password. Use a new password you don't use anywhere else. On Xbox One and Series X|S, Xbox Support says changing the password is enough to protect your profile saved on a console.account.microsoft.com/security → Change password
- Sign out everywhere. Within 24 hours this signs you out of browsers and apps, but not out of an Xbox console. That is why step 2 comes first.Advanced security options → Sign out everywhere
- Tidy your devices list. Microsoft describes Unlink as a way to free a download slot, because store content can go to only 10 devices, and Remove for a PC you no longer own or use. It doesn't describe either one as signing a console out.account.microsoft.com/devices → the device → Unlink or Remove
- Lock down a shared console. If your password is saved on a console other people use, Lock it down removes it, and the console then asks for it for most actions. A profile PIN adds a further layer.Profile & system → Settings → Account → Sign-in, security & PIN → Change my sign-in & security preferences → Lock it down
What takes effect when
| Step | What it does | What it doesn't do |
|---|---|---|
| Change password | Protects a profile saved on Xbox One or Series X|S | Doesn't clean up security info someone added |
| Sign out everywhere | Signs you out of browsers and apps within 24 hours | Doesn't sign out an Xbox console |
| Unlink a device | Frees one of the 10 download slots | Not described as signing a console out |
| Remove a PC | Takes a PC you don't own or use off the list | Not described for consoles |
| Lock it down | Removes the saved password from a console | Doesn't change who knows your password |
What this page won't help with
These checks are for your own Microsoft account. They are not a way to watch another person's sign-ins, play or messages, and PlayVault won't help identify, locate or “hack back” whoever signed in. On a shared console, talk to the people who use it before you change anything; the stranger is sometimes someone at home, and the family accounts guide covers sharing openly. If the account isn't yours, the only right step is to tell its owner. If you think a crime happened, our advice is to report it to your bank or local police.
When the usual route won't work
- The suspicious sign-in is older than 30 days. Recent activity covers the last 30 days only, so check orders, aliases and devices as well.
- You removed every security method at once. Microsoft may restrict the account for 30 days. Next time, add the new method first, then remove the old one.
- The stranger still plays on a console. Sign out everywhere skips Xbox consoles, and allows up to 24 hours elsewhere. Change your password; on a shared console, also use Lock it down.
- Your devices list is full. Store content can be downloaded to 10 devices. Unlink one you no longer use to free a slot.
- The location looks wrong but the device is yours. Locations are approximate and mobile networks route through other places. If you're still unsure, choose “This wasn't me”.
- You can no longer sign in. This page can't help from outside the account. Follow the hacked account guide, or the two-step guide if two-step verification is on.
Questions about unknown sign-ins
Does Sign out everywhere sign someone out of my Xbox console?
No. Microsoft says it signs you out of browsers, apps and other places within 24 hours, except an Xbox console. On Xbox One and Series X|S, changing your password is what protects a profile saved on another console.
Recent activity shows a sign-in from another city. Was I hacked?
Not necessarily. Locations come from IP addresses and are approximate, and mobile networks route activity through other places. Look at the device and browser too. If you're not sure it was you, Microsoft says to choose “This wasn't me”.
How do I know a sign-in alert email is real?
Microsoft says a genuine alert comes from account-security-noreply
Does removing a console from my devices list sign it out?
Microsoft doesn't describe it that way. Unlink frees a download slot and Remove is described for a PC you don't use. Changing your password is what protects profiles saved on Xbox One and Series X|S.
A stranger used a console where my password is saved. How do I stop it?
Change your password first: on Xbox One and Series X|S that protects the saved profile. On a console you still use, Lock it down in Sign-in, security & PIN removes the saved password so the console asks for it for most actions, and a profile PIN adds a further layer.
Should I remove a security method I don't recognise straight away?
Yes, but add a method of your own first. Microsoft warns that changing all your security info at the same time can restrict the account for 30 days.
Can PlayVault tell me who signed in?
No. We don't identify or track anyone, and nothing here works on an account that isn't yours. Securing your own account is the step that cuts the other person off.
What if I can't sign in to check any of this?
Then someone may already have changed your password or security info. Go to the hacked Xbox account guide; if two-step verification is on and you have no method left, read the two-step guide first.
Sources
- Microsoft Support: What is the Recent activity page? Checked October 2026
- Microsoft Support: What happens if there's an unusual sign-in to your account Checked October 2026
- Microsoft Support: Manage devices used with your Microsoft account Checked October 2026
- Microsoft Support: How to sign out of your Microsoft account everywhere Checked October 2026
- Microsoft Support: Troubleshoot Microsoft verification code issues Checked October 2026
- Xbox Support: Secure your account if you think you’ve been hacked Checked October 2026
- Xbox Support: Remove your Microsoft account password from an Xbox console Checked October 2026
Verified October 2026 against the Microsoft and Xbox support pages above. Advice on reporting a crime is PlayVault's own, not a Microsoft statement.