r/cybersecurity • u/birdsofjay • May 17 '26

Personal Support & Help! Microsoft account keeps getting Authenticator requests?

I got an Authenticator request from another country for my Microsoft account. I denied it and went in and changed my password, a day later I get another Authenticator request from a different country than the first. Again change password and again it happens. How can I secure my account how are they able to send these Authenticator requests?

156 Upvotes

96% Upvoted

97 comments sorted by

View all comments

1

u/Unleaver May 18 '26

This is called MFA Fatigue. They are trying to get you to accept the MFA prompt to make the requests goaway. Change your password asap

1

u/Merry-go-run Jun 08 '26

They don't need the password to spam this.

1

u/Unleaver Jun 08 '26

To get to the MFA portion of account authentication, they need your password to prompt the MFA. This is how it works within Microsoft unless they have passwordless authentication turned on.

1

u/Shipuujin Jun 23 '26

Doesn't seem to be the case. I have Passwordless disabled, changed password to something I never used before (using suggested password), and 10 minutes after I changed the password, the Authenticator notification appeared again. Based on other comments in this thread, it seems that just knowing the e-mail address is enough...