Home xbox security flaw

ChrisMcCall2 · Nov 19, 2021

So today I've spent hours talking with Microsoft customer support.

I have found out a potential flaw with the family security on xbox.

My son (14 years old) has an xbox x where he gets his xbox ultimate paid for by subscription and we download games etc, his xbox is the "home xbox" where I can share his subscription and play his games on my xbox s.

Even though I have set up me as the parent account and he is the child account somehow xbox is alllowed him to swap the "home xbox" setting 5 times, to friends outwith my family. He didn't even need to log into my Microsoft account and I was completely unaware of this happened and it locked my xbox out until Nov 22.

I phoned xbox to ask why I didn't get notified of these changes, which I wouldn't of authorised The 1st customer support vanished, the 2nd customer support effectively told me I was telling lies and what I said was impossible to do, he then told me to hang up and phone another operator. The 3rd customer support was fantastic and helped me out. But couldn't advise me on how to stop it happening again.

So in a nut shell it is currently possible for him to buy on the xbox x (with my online consent) Forza Horizon 5 premium edition for £84.99 and various in game purchases on the xbox x then my son can switch the "home xbox" setting and lock me out without me getting asked authorise the change.

I think this undermines the parent account and potentially allowing strangers access to my account and I have no control over this.

It'll be interesting to hear what Microsoft think of this issue.

:)

Farscape247

change the account password, make sure he does not know his password, then he can't go sharing his login details with people to share games.

setting a home console does not come under parental controls,

SammyVS

I'm Samy an independent advisor. Welcome to the Xbox community. How are you?

Xbox home is an individual feature of each account, with that in mind, sharing your account information with other users is a violation of Microsoft's terms of service and may lead to account suspension.

Instruct him not to share his account information with other users as if he continues to do so he could lose his account and his games.

ngocphi

Ya you don't seem to understand parental settings

Like farscape said home share has nothing to do with parental setting

What you should be more concerned with is your son sharing his account details that's a big No No especially if thru xbox live and if he asks for login info back over xbox msgs it's phishing and ita a punishment he wouldn't want

If you want to share your account it has to be the owner doing it not to be passed around like candy

ChrisMcCall2

Thanks SamQY, I have explained to him what he's done wrong and why it's wrong, if the "system" gave me a notice when he wanted to change the "home xbox" setting I could have then at that moment explained his wrong doings.

I just think that a setting like switching the home xbox should be a parent setting when there's a child account involved.

ChrisMcCall2

I hear what your saying but taking his password off him seems a bit draconian, he needs his password to log into his games ect, also if he's to learn and understand the whole workings of passwords and account security he's better learning now, but the question is why is he as a child able to share this account information without my knowledge when I hold the parent account, if I was to get a notification saying he's trying to share his console I then could decide and if required educate him there and then why he's making a dodgy decision.

The 2nd customer support person said my son should not have been able to change this setting without my password.

Home xbox security flaw