Constant unauthorized sign in attempts are really annoying… clear data leak

Question

Constant unauthorized sign in attempts are really annoying… clear data leak

Emily Isaac 0

I have been getting constant push notifications to authorize sign in attempts… obviously I’m not going to do so but it’s getting really annoying. Once or twice every few hours. Obviously this indicates some sort of data leak… it’s so annoying, I’m about to delete both my Microsoft account and the Authenticator app. This happened a couple months ago so yes, I changed my password. I don’t want to do this every time YOUR security gets breached . Can you guys start like, blocking IPs or something?

Emily Isaac 0 Reputation points

2026-08-15T15:35:05.08+00:00

While I appreciate the auto response, it’s a waste of tokens when it responds to something I didn’t say. I didn’t say someone signed in. I said I am getting incessant requests. Etc. … so if someone — an actual person — could respond, that’d be preferable.

1 answer

Your answer

Emily Isaac 0 Reputation points

2026-08-15T15:35:05.08+00:00

While I appreciate the auto response, it’s a waste of tokens when it responds to something I didn’t say. I didn’t say someone signed in. I said I am getting incessant requests. Etc. … so if someone — an actual person — could respond, that’d be preferable.

Answer 1

Those prompts do not mean the account was signed in to. They usually mean someone is trying to sign in, someone entered the wrong phone or email, or a delayed prompt arrived. For any prompt not initiated by the account owner, select Deny.

For a personal Microsoft account, the supported actions are:

Go to the Security basics page.
Select Review activity and check the Recent activity page for unusual sign-in attempts.
If any activity is clearly not recognized, select This wasn't me for unusual activity entries, or Secure your account for recent activity entries.
From Security basics, select Change password and use a strong password.

If repeated prompts continue even after a password change, accepted Microsoft Q&A guidance in this scenario is to reduce sign-in attempts against an exposed sign-in name by:

Adding a new email alias to the Microsoft account.
Making the new alias the primary alias.
Disabling sign-in for the old alias while keeping it for email use.

That prevents the old exposed alias from being used to sign in, which can stop repeated unsolicited Authenticator prompts.

If the issue is with Authenticator notifications themselves:

Check that the phone is not in Do Not Disturb or Quiet mode.
If notifications fail for only one account, remove that account from Authenticator and add it again, allowing notifications.
If prompted with Enable push notifications to receive alerts, enable push notifications in device settings and confirm network connectivity.

For a work or school account:

Sign in to My Account.
Open Recent Activity from the left pane and review sign-ins.
If a successful sign-in is not recognized, immediately change the password.
Go to Security info to update security settings.
If many sign-in attempts triggered MFA protection, wait and try again later or use a different MFA method. If someone else may be trying to access the account, contact the IT administrator.

Microsoft Entra documentation also notes that anomalous sign-ins do not generate push notifications automatically. To approve an anomalous sign-in, the user must open Microsoft Authenticator or Authenticator Lite and refresh manually.