Published 2024-06-12 by TechNet New England
If you lose a device, suspect your account is compromised, or simply want to sign out everywhere, you can force a sign-out of all active Microsoft 365 sessions. ## Method 1: Sign Out from the Microsoft Account Page This works for personal and work Microsoft accounts. 1. Go to [myaccount.microsoft.com](https://myaccount.microsoft.com) and sign in. 2. Click **Devices** or **Security**. 3. Under **Sign-in activity**, review recent sign-ins. 4. Click **Sign out everywhere** if available. For work accounts, go to [myaccount.microsoft.com/device-activity](https://myaccount.microsoft.com/device-activity) to see all devices where your account is signed in. ## Method 2: Change Your Password Changing your password immediately invalidates most active sessions. 1. Go to [mysignins.microsoft.com/security-info](https://mysignins.microsoft.com/security-info). 2. Click **Change password**. 3. Enter your current password and create a new one. 4. Check **Sign me out of all sessions** if that option appears. 5. Click **Submit**. All devices will need to re-authenticate with the new password. ## Method 3: Ask Your IT Administrator For Microsoft 365 business and enterprise accounts, your IT administrator can: Revoke all refresh tokens from the admin center, which forces every device to re-authenticate. Disable the account temporarily. Reset the password on your behalf. Review sign-in logs for suspicious activity. If you suspect your account is compromised, contact your IT help desk immediately. Do not wait. ## After Signing Out Everywhere After forcing a sign-out: 1. **Change your password** if you have not already. 2. **Review your MFA settings** at mysignins.microsoft.com/security-info. Remove any authentication methods you do not recognize. 3. **Check email forwarding rules.** Attackers sometimes set up email forwarding to capture your messages even after you change the password. In Outlook webmail, go to Settings > Mail > Forwarding and make sure no unknown forwarding addresses are configured. 4. **Re-sign in on your trusted devices** one at a time. ## When This Is Necessary Force sign-out when: A laptop, phone, or tablet is lost or stolen. You signed in on a public or shared computer and forgot to sign out. You see unfamiliar sign-in locations in your activity log. Your IT provider tells you there was a compromise on your account. You are leaving an organization and want to remove your account from devices you no longer control.