MFA Fatigue / Prompt Bombing: Is Microsoft going to do something about it?

Question

MFA Fatigue / Prompt Bombing: Is Microsoft going to do something about it?

Stan Lin 5

I have been getting 20-30 login request a day and it has been going on for quite sometime. Will you folks do something about it???

Don Varnau 19,930 Reputation points Volunteer Moderator

2026-02-11T15:28:36.69+00:00

Not sure why you received only the one reply.

You can eliminate these login requests so long as the new alias you create isn't posted to a website or leaked or harvested in some other way.

https://www.outlook-tips.net/tips/keeping-hackers-microsoft-accounts/

To repeat a warning that's in that article... After creating the new alias do not delete the original address. Leave it there as a non-primary alias that cannot be used for login.

The original address can still send and receive mail. It simply can't be used to login to the account.

Don

1 answer

Your answer

Don Varnau 19,930 Reputation points Volunteer Moderator

2026-02-11T15:28:36.69+00:00

Not sure why you received only the one reply.

You can eliminate these login requests so long as the new alias you create isn't posted to a website or leaked or harvested in some other way.

https://www.outlook-tips.net/tips/keeping-hackers-microsoft-accounts/

To repeat a warning that's in that article... After creating the new alias do not delete the original address. Leave it there as a non-primary alias that cannot be used for login.

The original address can still send and receive mail. It simply can't be used to login to the account.

Don

Answer 1

Microsoft is aware of the issues related to MFA fatigue and prompt bombing, which can lead to users receiving excessive authentication requests. The company emphasizes the importance of configuring authentication settings properly to avoid over-prompting users. Misconfigured applications and overly aggressive prompt policies can contribute to this problem.

To address these concerns, Microsoft provides tools such as the Authentication Prompts Analysis workbook, which helps identify and analyze the frequency and types of authentication prompts users receive. This can assist in mitigating the issues related to excessive prompts and improving the user experience.

If you are experiencing a high number of login requests, it may be beneficial to review your account settings or consult with your IT department to ensure that the authentication policies are configured appropriately.

References:

Authentication prompts analysis workbook