Share via

Authenticator problems

Cyril Lombard 0 Reputation points
2026-05-27T11:05:47.8566667+00:00

How do I stop frequent Authenticator requests which are not mine?

Microsoft Security | Microsoft Authenticator
0 comments No comments

1 answer

Sort by: Most helpful
  1. AI answer

    2026-05-27T11:05:59.6033333+00:00

    Frequent Microsoft Authenticator prompts that are not initiated by the account owner usually mean someone (or something) is repeatedly trying to sign in.

    Do not approve any prompts that were not initiated.

    Then take these steps:

    1. Change the account password immediately
      • Go to the account’s security page and reset the password to a strong, unique one.
      • This helps stop ongoing sign‑in attempts that are using a known or leaked password.
    2. Strengthen sign‑in with safer methods
      • Use Microsoft Authenticator number matching and location prompts where available.
      • Consider moving to passwordless sign‑in (for example, Microsoft Authenticator, Windows Hello, FIDO2 security keys) so that a password is not the primary factor being attacked. See Go passwordless.
    3. Review and adjust verification methods
      • Make sure only trusted phone numbers, emails, and devices are configured as security info.
      • Remove any methods that are no longer controlled (old phone numbers, unused email addresses, lost devices).
    4. Monitor and secure devices
      • Ensure devices used for Authenticator are not jailbroken/rooted and are fully updated.
      • Keep other security apps (for example, Microsoft Defender, Intune Company Portal) updated and ensure device date/time are correct.
    5. If verification codes or prompts arrive that were not requested
      • Treat them as a sign that someone is trying to access the account.
      • Do not respond to or use any code that was not requested.
      • After changing the password and securing methods, consider going passwordless to reduce these events.

    If this is a work or school account and the prompts continue, contact the organization’s help desk or IT admin so they can review sign‑in logs, enforce stronger MFA policies, and help reset authentication methods if needed.


    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.