A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
Do not approve or respond to those requests. Unrequested verification prompts usually mean one of these things:
- Someone is trying to access the account.
- Someone entered the wrong phone or email by mistake.
- A previously requested code was delayed.
If the prompts are only being denied, the account remains protected because the attacker does not have the required verification.
Switching to a different authenticator is not the documented fix. A more effective way to reduce or stop repeated prompts on a personal Microsoft account such as Hotmail is to make the exposed sign-in address unusable for sign-in while keeping it for email:
- Sign in to the Microsoft account.
- Go to Your info.
- Open Sign-in preferences under Account info.
- Add a new alias that is not publicly known.
- Make that new alias the primary sign-in alias.
- In Change sign-in preferences, uncheck the current Hotmail address so it can no longer be used to sign in.
- Do not delete the old Hotmail address. It can still remain on the account for sending and receiving mail.
This keeps the Hotmail mailbox while preventing sign-in attempts that target the old exposed address.
For additional protection, a passwordless sign-in method can be used on the Microsoft account. Microsoft lists Windows Hello, Microsoft Authenticator, SMS or email codes, and physical security keys as passwordless options.
If the account is a work or school account instead of a personal Hotmail account, the documented action is to contact the organization’s Help desk or IT administrator for account and MFA changes.
- Troubleshoot Microsoft verification code issues | Microsoft Support
- Why is Microsoft texting me? | Microsoft Support
- Hi, I get in the last 24 hours numerous requests to sign in to my account by approving a certain number in my Authenticator app, this requests was not made by me, how can protect myself? - Microsoft Q&A
- I am getting many requests per day for authenticator app that I am not making - Microsoft Q&A
- Microsoft Authenticator keeps sending log in requests when I'm not trying to log in. - Microsoft Q&A