MS Personal Account - Passwordless account is disabled, but I still get many MFA prompts from hackers & I can log in with just username + MFA.
For my personal account, I have enabled MFA, and disabled passwordless login. However, I still get random MFA prompts when a hacker tries to log in. I can replicate it as well, when I go incognito, enter my username, I'm immediately redirected to the MFA prompt.
How can I require that I only get an MFA prompt after entering my password?