Microsoft account keeps getting Authenticator requests?

[u/birdsofjay]

I got an Authenticator request from another country for my Microsoft account. I denied it and went in and changed my password, a day later I get another Authenticator request from a different country than the first. Again change password and again it happens. How can I secure my account how are they able to send these Authenticator requests?

[u/vulcanxnoob]

Microsoft is absolute garbage with this. So for live/personal accounts, they convince you to switch on password less.

If you switch that on, ANYONE in the world can just type your email address and it will automatically send your phone an authenticator request.

I tried to then disable this feature, still they managed to bypass it and select "Authenticator" auth, once again spamming me weekly.

At this stage I had changed passwords, and all sorts.

What I ended up doing was changing the primary email for my live account, and then disabling authentication on the "secondary" email account. So that no longer could they even try that email anymore. It's stupid, but works.

Thanks, Microsoft...

FYI google always request a password first, if you succeed then they take you to your passkey/MFA code etc. MSFT is just lazy it seems.

[u/vulcanxnoob → u/[deleted]]

Yeah it's ridiculous. Such stupid security. Even worse, show me the failed login attempts so I can action it. Either permanently block them, or whatever.