A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
Yes, additional action is required because repeated unexpected prompts indicate ongoing sign-in attempts.
Steps to take:
- Review recent sign-in activity
- Go to the Security basics page: https://account.microsoft.com/security
- Select Review activity.
- On the Recent activity page, look for unfamiliar sign-ins:
- If activity appears under Unusual activity, expand it and select This wasn't me.
- If it appears under Recent activity, expand it and select Secure your account.
- Secure the account
- From Security basics, select Change password and set a strong, unique password not used on any other site.
- Ensure the password is not shared and not reused.
- Confirm only trusted security info is present
- While in Security basics, review phone numbers, email addresses, and sign-in methods.
- Remove anything not recognized.
- Continue denying any prompts that are not initiated personally
- Deny all unexpected Authenticator prompts until sign-in attempts stop.
If sign-in is no longer possible (for example, if someone changes the password), follow the steps in When you can't sign in to your Microsoft account and, if needed, use Forgot my password and select I think someone else is using my Microsoft account to recover the account.
References: