Authenticator request random times

Question

I am receiving random requests from Authenticator if I deny it comes right back a few minutes later, if I let notification expire, it comes back again at a later random time.

I have read about MFA flood attacks and a bit concerned for my account.

I don’t use it for anything but office subscription and Xbox. I changed my password and still getting these requests. I’m not using outlook email that might be bugging out and requesting auth.

I can see location when it is me logging in and login infrequently. Can I tell where these requests are coming from? And how do I escalate to support?

ty!

Answer 1

It sounds like you are experiencing unwanted authentication requests from the Microsoft Authenticator app, which can indeed be concerning. Here are some steps you can take to address the situation:

1. Check for Compromised Accounts: Since you mentioned changing your password, ensure that your account is secure. If you suspect that your account may be compromised, consider enabling additional security measures, such as reviewing your recent sign-in activity to identify any unauthorized access.
2. Monitor Sign-in Activity: You can check the sign-in logs in your Microsoft account to see if there are any unusual sign-ins or attempts from unfamiliar locations. This can help you determine if the requests are legitimate or if they are part of a flood attack.
3. Use Microsoft Authenticator Features: The Microsoft Authenticator app has features that can help you manage notifications. Ensure that you have the latest version of the app, as updates often include security enhancements.
4. Contact Support: If you continue to receive these requests and cannot determine their source, it may be best to escalate the issue to Microsoft support. You can typically find support options through your Microsoft account settings or the Microsoft support website.
5. Consider App Passwords: If you are using legacy applications that do not support modern authentication, you may need to set up app passwords. However, since you mentioned not using Outlook, this may not apply to your situation.
6. Review Security Settings: Check your security settings in your Microsoft account to ensure that everything is configured correctly, including multi-factor authentication settings.

By following these steps, you can better understand the source of the requests and take appropriate action to secure your account.

---

References:

• Microsoft Entra security operations for user accounts
• Frequently asked questions about Microsoft Entra multifactor authentication