Hi, I'm John! I will help you with this.
The official Microsoft address for account security notices is:
The one you shared does look genuine, especially since it’s coming from @accountprotection.microsoft.com, which is an official Microsoft domain. However, the most important part is confirming whether you actually made this change or not.
Reference: "Can I trust email from the Microsoft account team?" https://support.microsoft.com/account-billing/can-i-trust-email-from-the-microsoft-account-team-685fd302-f52f-1a9f-cc13-065dec46fe25
To help narrow down the issue:
Did you recently add a passkey or make any security changes to your Microsoft account?
- If yes, then you can safely ignore the email.
- If no, don’t click any links in the email just to be safe. Instead:
- Open a browser and go directly to the Microsoft account website by typing it manually or use https://account.microsoft.com
- Sign in and review your Recent activity https://account.live.com/Activity to check for any unfamiliar sign-ins.
- Review your security info and account aliases to make sure nothing was added without your knowledge: https://account.live.com/SignInPreferences
- If you see anything suspicious, change your password immediately and remove any unknown security methods.
To be safe, I recommend:
- Don’t click on any links or download anything from that email.
- Go directly to the Microsoft Account Activity page https://account.live.com/Activity and check your recent sign-in activity. If there’s nothing unusual there, then the message most likely isn’t from Microsoft.
- If you didn’t request any changes and the email is not officially from Microsoft, it’s a good idea to ignore or report the email as phishing.
I really hope this information is helpful.
Let me know if you have any further questions or concerns.
Click "Add comment" to let me know.
Regards,
John J.D.