Why does my Authenticator software keep receiving approval requests that I didn't log in？

Question

In the past month, I have frequently received login approval requests that were not initiated by me. How can I prevent this from happening again? Why is this happening?

Answer 1

These unrequested approval prompts mean that something (or someone) is repeatedly trying to sign in with the account that is protected by Microsoft Authenticator.

Why this is happening

1. Someone is trying to access the account
   • An attacker or automated script has the username and is repeatedly attempting to sign in.
   • Because the account is protected with Authenticator, each attempt triggers a push notification asking “Are you trying to sign in?”.
2. Someone mistyped their sign-in information
   • Another user may have accidentally entered the email or phone number when trying to log in to their own account.
   • Their attempts will still generate prompts on the Authenticator app.
3. Delayed or repeated delivery of a previous prompt
   • A sign-in prompt that was legitimately requested earlier might be delayed by the notification service and arrive later, appearing as if it was not initiated.

How to stop or reduce these prompts

1. Always deny any request not initiated
   • Select Deny on every prompt that was not explicitly started.
   • This prevents unauthorized access even if someone has the username and password.
2. Strengthen and modernize sign-in
   • Ensure strong, unique passwords and avoid reusing passwords across sites.
   • Consider going passwordless (for work/school accounts) using methods like Microsoft Authenticator, Windows Hello, SMS/Email codes, or security keys. Passwordless methods are more resistant to guessing, theft, or phishing.
3. Review and adjust security settings
   • Check account security settings and sign-in methods to ensure only intended devices and methods are configured.
   • Remove old or unused devices and methods where possible.
4. Monitor and respond to suspicious activity
   • If these prompts are frequent and clearly not from legitimate activity, treat them as a sign that someone is trying to access the account.
   • Change the password and review recent activity in the account security portal.

As long as all unrequested prompts are denied and the account security is kept up to date, the account remains protected even if others attempt to sign in.

---

References:

• Using Outlook mobile to sign in
• Common problems with two-step verification for a work or school account
• Authentication methods in Microsoft Entra ID - Microsoft Authenticator app

Answer 2

In response to this situation, I have changed my password