Managing personal Outlook.com account settings, security, and privacy
When I do receive the email with the code, which appears to be legit, I check my security settings and look at the login history. So far it's been quiet other than when I log in. I would think that trying to reset a password would trigger the 2-Factor or at least the authentication app?