I am still receiving unexpected sign in request authentication even after changing password

Question

I get several notifications from authenticator each day

Answer 1

Hello @Glen Muir,

It appears that you are experiencing unauthorized sign-in attempts that are repeatedly triggering Microsoft Authenticator notifications. May I know whether this issue is occurring with your personal account or your business account? Based on what you've described, it appears that your username may have been exposed, and someone is attempting to access your account.

1 - You are using a Personal Account

You can use any of your aliases to sign in, and you can select any of them for sending and receiving email. Verification codes sent by email can only be sent to your primary alias or another email address added as a verification method. Therefore, you can change your primary email address while you still able to use it as alias email. Prevent from unknown sign-in attempts.

You may follow the steps in the Microsoft KB below to add a new alias: Change the email address for your Microsoft account | Microsoft Support

To help stop unauthorized sign-in attempts, you can:

• Create a new email alias (a random string)
• Set the new alias as your primary sign-in email
• Disable sign-in access for the old email alias

As a result: Unknown users will no longer be able to attempt sign-ins using your old exposed email address.

2 - You are using Business Account

If you are an end-user of an organization, you can reach out to your Global Administrator or IT Support team to further improve account security and help prevent repeated authentication notifications. They can support to change your primary email address and keep the current email as alias so you can keep send and receive email from the alias email address. For more information on how to change alias: Add another email alias for a user - Microsoft 365 admin | Microsoft Learn

If you are an administrator, you can take an action to change your primary email address. Additionally, you can create a Conditional Access policy for your tenant to prevent unauthorized access from different countries.

You can follow this article to create the policy: Conditional Access - Block access by location - Microsoft Entra ID | Microsoft Learn

For any further concern, please feel free to let me know.

---

If the answer is helpful, please click "Yes". If you have extra questions about this answer, please click "Comment" 

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.