A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
Take immediate steps to secure the account and stop the sign-in prompts:
- Review recent sign-in activity
- Go to the Security basics page and select Review activity.
- On the Recent activity page, look for any sign-ins or attempts that are not recognized.
- For entries in Unusual activity, expand and select This wasn't me.
- For suspicious entries in Recent activity, expand and select Secure your account so Microsoft can help lock down the account.
- Change the password again
- After confirming unusual activity, go back to Security basics and select Change password.
- Set a strong, unique password that is not used on any other site.
- Turn on or strengthen two-step verification / passwordless sign-in
- Use the Microsoft Authenticator app as the primary sign-in method and consider going passwordless, which is more secure than passwords alone.
- Follow the steps in How to help keep your Microsoft account secure to enable passwordless sign-in and use Microsoft Authenticator or other strong methods.
- Check for signs of compromise and clean up
- If there is any chance the device is infected, run a full antivirus scan as described in How to recover a hacked or compromised Microsoft account before changing passwords again.
- After securing the device, change the password once more and verify all security info (phone numbers, alternate emails, and Authenticator registrations) on the Security settings pages, removing anything not recognized.
- Monitor and respond to future prompts
- Do not approve any Authenticator prompts that are not initiated personally.
- If sign-in attempts continue but are blocked by Authenticator, the account is likely being targeted but not successfully accessed; keep MFA/passwordless enabled and keep monitoring the Recent activity page.
If access problems occur or suspicious activity continues after these steps, use the guidance in I can't sign in to my Microsoft account and How to recover a hacked or compromised Microsoft account to escalate recovery.
References: