how do i find full sign in activitiy& history for all devices in my mircosoft account?

Wendy C 0 Reputation points
2025-11-18T16:43:00.4766667+00:00

my outlook was hacked yesterday i could see devices that were logged into my account. i changed my password. today i dont see any history of the scammers devices that logged in. i desperatley need to see them to prove how someone took thousands of dollars from me.

i dont understand tha select child tag. i might have picked the wrong one

Microsoft Security | Microsoft Identity Manager
0 comments

2 answers

Sort by: Oldest
Most helpful Newest Oldest

  1. AI answer

    2025-11-18T16:43:23+00:00

    To find the full sign-in activity and history for all devices associated with your Microsoft account, you can access the activity logs in the Microsoft Entra admin center. Here are the steps you can follow:

    1. Log into the Microsoft Entra admin center: Use your Microsoft account credentials to sign in.
    2. Access Activity Logs: Navigate to the activity logs section, where you can view sign-in attempts and activities associated with your account.
    3. Filter Logs: You can customize and filter the logs based on specific criteria such as date range, user, and client app to narrow down the results to the relevant sign-ins.
    4. Review Sign-in Details: Each sign-in attempt will provide details about the user, the client used for access, and the resources accessed. You can also check for any unusual activity or devices that were logged in during the time your account was compromised.

    If you need to investigate specific sign-ins further, you can utilize the unique identifiers provided in the logs to correlate activities and gather more information about the sign-ins that occurred.

    If you are unable to find the information you need or if the logs do not show the expected details, consider reaching out to Microsoft support for further assistance in recovering your account activity history.

    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

  2. Adam Zachary 2,265 Reputation points
    2025-11-20T21:59:20.3933333+00:00

    Typically this is one of the most confusing parts of a Microsoft personal account, because the sign-in history you see on the security page is limited and may not always show older devices once you change your password or remove a session. For personal Outlook.com / Microsoft accounts, all available sign-in activity is found at this page:

    https://account.microsoft.com/security

    From there you can open ‘Review recent activity’ to see sign-ins, locations, devices, and any unusual access. If a hacker logged in, that’s where it will appear. But once you change your password and force a sign-out, some old sessions may disappear from the list, which is why you might not see yesterday’s entries anymore.

    If you need the information for a fraud or police report, the safest option is to contact Microsoft Account Support directly. They can review the account at a deeper level than what the public page shows and can confirm whether suspicious access took place, even if it no longer appears in your dashboard

    Was this answer helpful?

    2 people found this answer helpful.

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.