Concerned About the Security of Your Account?
If you believe your St. John Fisher University account may have been compromised, have noticed suspicious activity, or simply want to verify that your account is secure, review the items below.
Taking a few minutes to review your password, Multi-Factor Authentication (MFA) methods, and recent account activity can help protect your personal information and prevent unauthorized access.
Security Review Checklist
1. Change Your Password
If you suspect someone else may know your password, change it immediately.
A strong password should:
- Be unique to your St. John Fisher University account
- Not be used on other websites or services
- Be difficult for others to guess
- Be changed immediately if you suspect unauthorized access
Self-Service Password Reset
You can change or reset your password using the University's Self-Service Password Reset tool.
For step-by-step instructions, review:
- Self-Service Password Reset Instructions
If you are unable to reset your password, contact the OIT Service Desk for assistance.
2. Review Your Multi-Factor Authentication (MFA) Methods
Multifactor Authentication (MFA) adds an extra layer of security by requiring a second factor of authentication when signing in.
Regularly review your registered authentication methods to ensure:
- All listed devices belong to you
- Phone numbers are current and accurate
- Old devices have been removed
- No unauthorized authentication methods have been added
Review Your Security Information
To view and manage your registered MFA methods, visit:
Review the following:
- Microsoft Authenticator devices
- Phone numbers used for verification
- Alternate authentication methods
- Devices and methods you no longer use
If you discover an unfamiliar device, phone number, or authentication method:
- Remove the unrecognized method immediately.
- Change your password.
- Contact the OIT Service Desk.
3. Check Recent Microsoft Account Activity
Microsoft maintains a log of recent sign-in activity associated with your University account.
Review your activity for:
- Sign-ins from unfamiliar locations
- Unexpected devices
- Failed sign-in attempts
- Unrecognized access attempts
To review your account activity:
If you notice suspicious activity:
- Change your password immediately.
- Review your MFA methods.
- Contact the OIT Service Desk.
4. Review Active Google Sessions
If you use University-provided Google services, review the devices currently signed in to your Google account.
Look for:
- Devices you no longer own
- Old browsers or computers
- Unrecognized devices
- Sessions from unexpected locations
Review active Google sessions:
If you find an unfamiliar device:
- Sign out of the device immediately.
- Change your password.
- Review your MFA settings.
- Contact the OIT Service Desk if you believe your account has been compromised.
5. Contact OIT if You Have Concerns
Contact the OIT Service Desk if:
- You believe your account has been compromised
- You discover unfamiliar MFA methods
- You identify unauthorized sign-in activity
- You need assistance securing your account
- You are unable to reset your password
Additional Security Recommendations
To help keep your account secure:
- Never share your password with anyone.
- Only approve MFA notifications that you initiated.
- Be cautious of phishing emails, text messages, and phone calls.
- Regularly review your MFA methods and account activity.
- Keep computers, tablets, and mobile devices up to date.
- Remove old or unused devices from your accounts.
- Report suspicious activity immediately.
Helpful Resources
Password Management
Self-Service Password Reset Instructions
Manage MFA Methods
Microsoft Security Information
Review Microsoft Sign-In Activity
Microsoft My Sign-Ins
Review Active Google Sessions
Google Device Activity
By regularly reviewing your password, MFA methods, and account activity, you can help protect your St. John Fisher University account from unauthorized access and reduce the risk of account compromise.