What's This Business With Microsoft Account Security Codes?

[sandyRoe]

I got an e-mail about one this morning

[SlackAlice]

No idea, I haven't got one. Might be a scam, what does it say?

Do not click on any links in it.

[ethelburga]

Is it this heart bleed thing?

[sandyRoe]

Microsoft account
Security code
Thanks for helping us verify the Microsoft account *******@msn.com.
Here is your code: *****
This is a verification code, not a password. If you didn't request this code, someone else may know your password and have access to your account. Click here to change your password.
Thanks,
The Microsoft account team

Here's the gist of it.

[beegeebee]

Appears to be a scam. the only way to check presumably would be to use your account. If someone's hacked it, your password won't work one would surmise.

[sandyRoe]

It's an account that I don't use much. I might go and close it altogether.

[bekah]

I had the same today, Microsoft are checking that people's security is up to date so that they can contact you to verify the account if needed. If you do not do it within the 7 day period they will lock the account to protect you. It's all on their website as below:

Why do I need to add security info?
To help protect your personal data, we're asking everyone with a Microsoft account to make sure the security info associated with their account is correct and up-to-date. When your security info (like an alternate email address or phone number) is current, we can use it to verify your identity if there's ever a problem. For example, if you forget your password, or if someone else tries to take over your account, Microsoft uses your security info to help you get back into your account.

[beso]

Beware of scams asking you to reset your password due to the HeartBeat exploit. It doesn't affect all servers, only those that use OpenSSL. Turns out that the open source was a vulnerability this time.

One place that definitely won't be a problem is Microsoft because they obviously use Windows servers which are unaffected.