A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
Select Deny on every sign-in prompt that was not initiated personally. These unrequested prompts usually mean either someone is trying to access the account, someone mistyped the email/phone when signing in, or a previously requested prompt is being delivered late. As long as Deny is always chosen for unexpected prompts, the account remains safe because the attacker cannot complete sign-in without approval.
To further protect the account and reduce these prompts, enable and use strong multifactor methods such as Microsoft Authenticator, Windows Hello, SMS/Email codes, or security keys, and consider going passwordless so that only device-based approvals (like Authenticator or biometrics) can complete sign-in.
If there is suspicion that someone is repeatedly trying to access the account, contact the organization’s IT administrator or Help desk so they can review sign-in logs and adjust security settings if needed.
References: