Authenticator keeps prompting me for codes I didn't request, even after I change my password.

Question

Authenticator keeps prompting me for codes I didn't request, even after I change my password.

Reese Watt 10

How can I tell where these requests are coming from and stop them?

Nick Hawkins 20 Reputation points

2026-01-08T18:50:10.4233333+00:00

I've been getting bombarded by these stray requests for the past few days too. Easily 2-3 times an hour from different countries.

In my testing with different devices, fresh browsers, and different networks / VPNs, I've found that you only need to enter a valid email address tied to a personal M365 account (not "work or school").

Once I entered the email, I automatically get a "sign in another way" screen where I can hit "approve sign in with a mobile app" to send a prompt without entering a password first.

On mobile, it's even worse! After entering a valid email, I get taken directly to a "get a code to sign in" page with a huge "Send notification" button.

Hopefully no one can get in unless I happen to accidentally tap the correct number (33% chance) instead of hitting "deny".

My understanding of "Two Factor Authentication" was that someone would need to pass through the "First factor" (password) before the "Second factor" can be triggered. I truly hope something is broken and that this isn't a "feature".

Edit:

Under my account "security settings", I can see "send sign in notification" listed as as "sign-in option".

If I go to remove this, it says my authenticator will be unlinked.

I would really like my authenticator to be "2FA Only" instead of "2FA and initial sign in method"
Dennis Johnson 0 Reputation points

2026-01-13T21:10:31.7133333+00:00

Since this same issue is happening to me, I would like to find out which application or device is asking for authentication

2 answers

Your answer

Nick Hawkins 20 Reputation points

2026-01-08T18:50:10.4233333+00:00

I've been getting bombarded by these stray requests for the past few days too. Easily 2-3 times an hour from different countries.

In my testing with different devices, fresh browsers, and different networks / VPNs, I've found that you only need to enter a valid email address tied to a personal M365 account (not "work or school").

Once I entered the email, I automatically get a "sign in another way" screen where I can hit "approve sign in with a mobile app" to send a prompt without entering a password first.

On mobile, it's even worse! After entering a valid email, I get taken directly to a "get a code to sign in" page with a huge "Send notification" button.

Hopefully no one can get in unless I happen to accidentally tap the correct number (33% chance) instead of hitting "deny".

My understanding of "Two Factor Authentication" was that someone would need to pass through the "First factor" (password) before the "Second factor" can be triggered. I truly hope something is broken and that this isn't a "feature".

Edit:

Under my account "security settings", I can see "send sign in notification" listed as as "sign-in option".

If I go to remove this, it says my authenticator will be unlinked.

I would really like my authenticator to be "2FA Only" instead of "2FA and initial sign in method"
Dennis Johnson 0 Reputation points

2026-01-13T21:10:31.7133333+00:00

Since this same issue is happening to me, I would like to find out which application or device is asking for authentication

Answer 1

If the Microsoft Authenticator app is prompting you for codes that you did not request, it could be due to several reasons. Here are some steps you can take to address this issue:

Check for Unauthorized Access: Ensure that your account has not been compromised. Review your account activity for any unauthorized sign-ins.
Remove Unused Devices: If you have multiple devices linked to your account, consider removing any that you no longer use. This can help prevent unwanted authentication requests.
Update Security Information: Make sure your security information is up to date. If you recently changed your password, ensure that all linked services and apps are updated with the new credentials.
Enable App Passwords: If you are using legacy applications that do not support modern authentication, you might need to set up app passwords for those applications.
Contact Support: If the problem persists, consider reaching out to Microsoft support for further assistance. They can help you identify the source of the requests and provide additional steps to secure your account.

By following these steps, you should be able to identify and stop the unwanted code requests from the Authenticator app.

Answer 2

JG 25

This is an aggressive MFA attack hoping someone will hit the correct code accidentally.

This will stop it...

Create a new alias: https://account.live.com/AddAssocId
Make the new alias your primary alias
At the bottom, click on "Change sign in preference".
On the next page, uncheck the box for the old alias.

0 comments

Share via

Authenticator keeps prompting me for codes I didn't request, even after I change my password.

2 answers

Your answer