A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
Unsolicited Microsoft Authenticator push notifications usually mean either someone is repeatedly trying to sign in as you, or an old/extra device or sign-in method is still registered and receiving prompts.
Take these steps:
- Treat the prompts as suspicious
- Always tap Deny on any notification that is not initiated by you.
- Review recent sign-in activity
- Go to the Security basics page and select Review activity.
- On the Recent activity page, check for unfamiliar sign-ins.
- For any activity that is not recognized, select This wasn’t me or Secure your account as described in the unusual activity guidance.
- Secure the account
- From the Security basics page, select Change password and set a strong, unique password even if normally using a passkey.
- This helps if someone has the old password and is repeatedly triggering MFA.
- Check and clean up security info and devices
- In the account security settings, review phone numbers, email addresses, and registered Authenticator instances.
- Remove any old or unknown devices or methods so they can no longer receive or trigger notifications.
- Prefer passwordless and strong MFA methods
- Using passkeys and Microsoft Authenticator as described in the Authenticator documentation provides stronger protection and can reduce reliance on weaker methods like SMS.
If the notifications continue after these steps, contact support via the official Microsoft account help channels and reference the unusual sign-in alerts and recent activity.
References: