Microsoft authenticator login requests

Question

So basically i receive daily login request from the whole word and i always instantly deny them. I have changed my password 2x and i still get requests. I dont know what to do

Answer 1

Unrequested Microsoft Authenticator prompts usually mean that someone (or something like a bot) is repeatedly trying to sign in with the account’s username, even though they do not know the password. As long as every unexpected prompt is denied, the account remains protected.

Actions to take:

1. Continue denying all unrequested prompts
   • Any “Are you trying to sign in?” or approval request that was not initiated must be denied immediately. This prevents unauthorized access even if the attacker knows the password.
2. Review recent sign-in activity
   • Go to the Security basics page and select Review activity.
   • On the Recent activity page, expand any sign-ins that are not recognized and mark them as This wasn’t me or Secure your account, as described in the unusual sign-in guidance.
3. Secure the account beyond just changing the password
   • After changing the password, ensure it is strong and unique.
   • Check and update security info (phone numbers, email addresses, and registered authenticators). Remove anything that is not recognized.
4. Consider moving to passwordless sign-in
   • For work or school accounts, going passwordless (for example, using Microsoft Authenticator, Windows Hello, or a security key) can reduce reliance on passwords that can be guessed or phished. See the guidance under Go passwordless for more secure sign-in methods.
5. Understand why prompts continue
   • Even after a password change, attackers or automated scripts may keep trying known usernames from many locations worldwide. This can generate repeated prompts, but without the correct approval from the Authenticator app, they cannot complete sign-in.

If the volume of prompts suddenly increases or there is any sign-in that appears successful and is not recognized, immediately review activity again and change the password from a trusted device and network.

---

References:

• Using Outlook mobile to sign in
• Common problems with two-step verification for a work or school account
• What happens if there's an unusual sign-in to your account