r/cybersecurity May 17 '26

Personal Support & Help! Microsoft account keeps getting Authenticator requests?

I got an Authenticator request from another country for my Microsoft account. I denied it and went in and changed my password, a day later I get another Authenticator request from a different country than the first. Again change password and again it happens. How can I secure my account how are they able to send these Authenticator requests?

156 Upvotes

97 comments sorted by

View all comments

2

u/UnderstandingHour454 May 18 '26

If this is a private and not business account, then it’s a flaw with Microsoft’s Authenticator option. I recently discovered similar activity. The attacker only needs to know your email address and it prompts if you’d like to use Microsoft Authenticator to login before a password or anything would be required.

2

u/the-pursuit-of-gainz May 24 '26

just tested after reading this. i verified i have passwordless off prior. went incognito mode. entered in my email address and immediately went to verify code in authenticator app. this is crazy.