How to get who is requesting account access via Authenticator

Yes. The practical way to investigate is to review recent sign-in activity for the account and look for failed or unusual attempts.

For a Microsoft account:

1. Go to the Recent activity page.
2. Review sign-ins from the last 30 days, including device or app details.
3. If anything looks unfamiliar, change the password and update security settings.

For a work or school account:

1. Sign in to My Account.
2. Select Recent Activity.
3. Expand each sign-in item and review the location, browser, operating system, and app.
4. If a sign-in is unfamiliar, change the password and update Security info.

What the Authenticator prompts usually mean:

• Someone may be trying to access the account.
• Someone may have entered the wrong phone number or email by mistake.
• A previously requested prompt may have been delayed.

What can and cannot be identified:

• The sign-in history can show details such as location, app, operating system, browser, and whether the attempt was successful or unsuccessful.
• It does not provide a direct identity of the person making the request.

Important actions:

• Deny any Authenticator prompt that was not initiated.
• If recent activity shows successful primary sign-in followed by failed additional verification, change the password immediately.
• If repeated prompts continue, review security settings and consider stronger sign-in methods such as multi-factor authentication or passwordless options where available.

References:

• Using Outlook mobile to sign in
• View your work or school account sign-in activity from My Sign-ins
• Check the recent sign-in activity for your Microsoft account
• Common problems with two-step verification for a work or school account