Spot a fake Microsoft sign-in page
Check the address before you type your password.
Criminals build pages that look exactly like the Microsoft sign-in screen. If you type your password there, they have it.
How to check
- Look at the address bar before you type anything.
- Find the part of the address just before the first single slash. The real Microsoft sign-in pages end in microsoftonline.com, microsoft.com or live.com.
- Be wary of addresses that only contain the word Microsoft, such as microsoft-login.example.com or microsoft.com.secure-login.net. The owner of an address is the last part before the first slash, not the first part.
- If you are unsure, do not use the link. Type office.com in the address bar yourself.
Careful
If you already typed your password on a page you doubt, follow I clicked a suspicious link now.