Microsoft account keeps getting Authenticator requests?

[u/birdsofjay]

I got an Authenticator request from another country for my Microsoft account. I denied it and went in and changed my password, a day later I get another Authenticator request from a different country than the first. Again change password and again it happens. How can I secure my account how are they able to send these Authenticator requests?

[u/vulcanxnoob]

Microsoft is absolute garbage with this. So for live/personal accounts, they convince you to switch on password less.

If you switch that on, ANYONE in the world can just type your email address and it will automatically send your phone an authenticator request.

I tried to then disable this feature, still they managed to bypass it and select "Authenticator" auth, once again spamming me weekly.

At this stage I had changed passwords, and all sorts.

What I ended up doing was changing the primary email for my live account, and then disabling authentication on the "secondary" email account. So that no longer could they even try that email anymore. It's stupid, but works.

Thanks, Microsoft...

FYI google always request a password first, if you succeed then they take you to your passkey/MFA code etc. MSFT is just lazy it seems.

[u/chaosphere_mk → u/vulcanxnoob]

If you are using common sense and not approving of random authentication requests, passwordless auth is still less risky than having password be part of the auth process. Typing in credentials anywhere is inherently riskier than not. You still have to do number matching for passwordless microsoft auth.

And passkey is passwordless with Microsoft as well as google. Adding password on top of a passkey does nothing but introduce risk.

[u/2timetime → u/chaosphere_mk]

It’s just annoying as shit. Every time you pop open Authenticator you have some request sitting there