@MojangSupport
I am currently in a support email thread where the support person had be change my microsoft password to one provided by them and is now asking for a login verification code.
This smells like phishing-101. Can you verify that this is the Mojang proper procedure?
To keep your information secure, please complete our request form at https://help.minecraft.net/hc/en-us/requests/new … so we can quickly and safely assist with your question!