Managing personal Outlook.com account settings, security, and privacy
The other Outlook address shown in that prompt is most likely security information used to verify or recover the current Microsoft account, not proof that the two inboxes are linked; do not select Looks good! if you do not recognize or control it.
Check and remove the address safely
Repeat these steps separately while signed in to each affected account:
- Open the Microsoft account Security page:
https://account.microsoft.com/security. - Select Manage how I sign in.
- Review every email address, phone number, authenticator, and passkey listed.
- If the displayed Outlook address is listed as a verification method:
- Expand that method.
- Select Remove.
- Select Remove again to confirm. ^1^
- If Microsoft requires another method first, add one you control under Add a new way to sign in or verify, verify it, and then remove the unfamiliar address. An authenticator app or passkey may be available if you do not want another email address or phone number associated with the account. ^2^
Choosing Update now is appropriate if it takes you to the security-information page where you can review and replace the unfamiliar method. Choose I don’t have any of these only when you cannot access any currently listed verification method.
If you want no recovery methods at all
Microsoft allows a request to remove all security information, but this has important consequences:
- The account enters a restricted state for 30 days.
- The old information does not actually change during that period.
- Outlook.com and most other services remain usable, but security-sensitive changes—including password and alias changes—can be unavailable.
- Microsoft cannot expedite the waiting period. ^3^
Keeping at least one method you control—preferably an authenticator or passkey rather than another email or phone number—is safer because security information is what enables identity verification and account recovery. ^4^
Check whether it is actually an alias
An alias is different from security information. Aliases are email addresses belonging to the same Microsoft account and share its password, mailbox-related account data, storage, subscriptions, and settings. ^5^
To check:
- While signed in to the affected account, open Your info.
- Select Manage how you sign in to Microsoft.
- Inspect the addresses listed as account aliases.
If the other Outlook address appears there, it is an alias rather than merely a recovery method. Before removing it, ensure the address you intend to keep is the primary alias. Be cautious: removing a Microsoft-domain alias can permanently delete that address, so do not remove it merely because it also appeared in a verification prompt.
If you never added the unfamiliar address
Treat an unrecognized security method as a possible unauthorized account change:
- Go to Security → Review activity.
- Examine sign-ins and profile changes from the last 30 days.
- For an unfamiliar event under Unusual activity, expand it and select This wasn’t me. For suspicious entries under Recent activity, select Secure your account. ^6^
- Change the password to a new, unique password.
- Remove the unfamiliar verification method and add an authenticator or passkey that only you control.
If a page says “Security info change is still pending” and you did not initiate the change, open the Security page, select let us know, and follow the prompts rather than waiting for the change to complete. ^3^
References
- Removing a sign-in verification method | Microsoft Support
- Microsoft account security info & verification codes
- What does “Security info change is still pending” mean? | Microsoft Support
- How to help keep your Microsoft account secure | Microsoft Support
- Change the email address for your Microsoft account | Microsoft Support
- What is the Recent activity page? | Microsoft Support