Authenticator notifications

Yes, action is required to protect the account.

Unrequested sign-in prompts usually mean one of the following:

1. Someone is trying to access the account.
2. Someone accidentally entered the phone/email when trying to sign in.
3. A delayed delivery of a past prompt.

Required steps:

1. Always select Deny on any sign-in request not personally initiated. This prevents unauthorized access.
2. Review recent account activity and secure the account if anything looks unfamiliar or suspicious. For Microsoft accounts, use the recent activity page referenced in the documentation.
3. Do not respond to or approve any prompts that are unexpected.

If unrequested prompts continue, change the account password and review all security information (phone, alternate email, and sign-in methods) to ensure only trusted details are configured.

References:

• Using Outlook mobile to sign in
• Authentication methods in Microsoft Entra ID - Microsoft Authenticator app