A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
The repeated Microsoft Authenticator prompts mean someone (or something automated) keeps trying to sign in with the correct username/alias, but they still cannot get in as long as every unrequested prompt is denied.
To handle this situation:
- Continue denying all unrequested prompts
- For any "Are you trying to sign in?" prompt that was not initiated, always select Deny. Without the correct response, the account remains safe.
- This behavior is expected when someone repeatedly tries to access the account or has entered the email/phone by mistake.
- Review recent sign-in activity and secure the account
- Go to the Security basics page and open Review activity.
- On the Recent activity page, expand any sign-ins from locations/devices that are not recognized.
- If they appear under Unusual activity, select This wasn't me.
- If they appear under Recent activity, select Secure your account.
- Follow the guided steps to secure the account.
- Change password and verify security info
- From the Security basics page, select Change password and set a strong, unique password (not reused anywhere else).
- Confirm that all security info (phone numbers, emails, and sign-in methods) are correct and belong only to the account owner. Remove any unknown phone numbers, emails, or devices.
- Understand why prompts still appear after password or alias changes
- Unrequested prompts or codes can still appear even after changing password or alias because:
- Someone is trying to access the account using the correct sign-in name.
- Someone accidentally entered the wrong phone/email when trying to sign in.
- Delivery of a previously requested prompt or code is delayed.
- Changing the primary alias does not prevent someone who already knows the original sign-in address from attempting to sign in. The system will still send prompts to the configured verification method, but the attacker cannot proceed without approval.
- Unrequested prompts or codes can still appear even after changing password or alias because:
- Consider going passwordless to reduce unwanted codes
- To reduce reliance on passwords and verification codes, enable passwordless sign-in methods such as Microsoft Authenticator, Windows Hello, SMS/Email codes, or security keys.
- Passwordless sign-in is more secure because only the legitimate user can respond correctly on the trusted device at the right time.
- See How to go passwordless with your Microsoft account for setup details.
- If verification methods are blocked or error messages appear
- If a "Try another verification method" message or similar block appears, it may be due to unusual activity or a high volume of requests.
- In that case:
- Try another verification method already configured (alternate email, SMS, etc.).
- Try signing in from a different network (switch Wi‑Fi/cellular or use another network).
- Wait at least 24 hours without repeated attempts; blocks often clear automatically.
The key point is that as long as all unrequested prompts are denied and the account’s security info and password are controlled only by the legitimate owner, the repeated attempts cannot succeed.
References: