Share via

Unauthorized attempts to assess my account through Authenticator

Andrew Giles 5 Reputation points
2026-05-31T19:52:12.12+00:00

I have been receiving multiple unauthorized attempts to assess my Microsoft account through Authenticator. What can I do to protect my identity and block these unauthorized attempts?

Microsoft Security | Microsoft Authenticator

1 answer

Sort by: Most helpful
Most helpful Newest Oldest

  1. AI answer

    2026-05-31T19:52:28.1133333+00:00

    Unwanted Microsoft Authenticator prompts usually mean someone is repeatedly trying to sign in with the correct username but without full access to your second factor. Take these steps to protect the account and reduce or block these attempts:

    1. Treat the prompts as suspicious and deny them
      When an unexpected Authenticator notification appears, always choose Deny. The Authenticator app is designed to help prevent unauthorized access by letting you reject fraudulent sign-in attempts.
    2. Change the account password immediately
      Change the Microsoft account password to a strong, unique one that is not used on any other site. This helps if an attacker has guessed or obtained the current password.
    3. Review recent sign-in activity
      For a work or school account, review sign-in activity to see where the attempts are coming from and confirm they are not yours. If you see unsuccessful sign-ins or entries marked as unusual, change the password and keep multi-factor authentication (MFA) enabled so attackers cannot get in even if they know the password.
    4. Strengthen and review MFA methods
      • Ensure Microsoft Authenticator is correctly set up and secured on a trusted device.
      • Remove any MFA methods or security info you do not recognize (such as unknown phone numbers or email addresses) and add secure methods like Microsoft Authenticator or security keys.
      • Keep multiple verification methods configured so there is always a safe fallback.
    5. Be aware of anomalous sign-in behavior with Authenticator
      Authenticator may stop sending push notifications for anomalous or unfamiliar sign-ins. In those cases, sign-in approval requires opening the Authenticator app and manually refreshing to see and approve requests. This behavior helps reduce the risk of accidentally approving fraudulent prompts.
    6. If attempts are repeated or suspicious, involve your admin or support
      • For work or school accounts, contact the organization’s IT administrator and ask them to review Microsoft Entra sign-in logs for malicious activity and adjust security policies if needed.
      • For personal Outlook.com/Microsoft accounts, if unusual sign-in activity continues or the account may be compromised, use the Sign-in Helper and follow guidance on securing or recovering the account.
    7. Avoid repeated sign-in attempts yourself
      Repeated failed attempts can trigger protection mechanisms that temporarily block verification codes or sign-ins. If locked out, wait before trying again and use alternative verification methods where possible.

    By combining a strong password, properly configured MFA with Microsoft Authenticator, and regular review of sign-in activity, unauthorized attempts can be blocked from succeeding even if they continue.

    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.