A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
Unrequested sign-in prompts in Microsoft Authenticator or Outlook mobile usually mean one of the following:
- Someone is trying to access the account using the correct username but without the second factor.
- Someone accidentally typed the phone number or email address when trying to sign in to their own account.
- A sign-in prompt that was legitimately requested earlier is being delivered with a delay.
Actions to take:
- Always deny unexpected prompts
- Select Deny on any sign-in request that was not initiated.
- Without the correct approval, the account remains protected.
- Check recent account activity
- Go to the account’s recent activity page (for Microsoft accounts, see the guidance linked in the references) and review sign-ins.
- If any events are not recognized, use the Secure your account option there.
- Strengthen account security
- Ensure two-step verification/MFA is enabled where supported.
- Review and update security info (phone, alternate email) and remove anything not recognized.
- If sign-in attempts continue frequently
- Continue to deny all unrequested prompts.
- Follow the guidance on how to help keep the Microsoft account secure and on troubleshooting unrequested verification codes (see references).
If unable to sign in because of too many attempts or lockouts, wait for the lockout period to expire and then follow the documented recovery and security-hardening steps.
References: