MFA & Verification Issues

How Microsoft Two-Step Verification Works on a Trusted Device

Tauseeq Magsi Oct 8, 2026 869 views

Question details

The user wants to understand why Microsoft two-step verification (MFA) allows direct login via the Authenticator app without prompting for a password or secondary code on a previously used device.

How Microsoft Two-Step Verification Works on a Trusted Device

Product: Microsoft Account
Device & OS: not provided
Scenario: Signing into a Microsoft account on a browser or device where the 'Remember me' or 'Don't ask again on this device' option was previously selected.
Observed behavior: The system bypasses the password or secondary verification request during login, even after the user has manually signed out of their previous session.

Before you start

Ensure you have access to your backup email or Microsoft Authenticator app before modifying your account security settings.

Solution 1Recommended

Test Two-Step Verification on an Untrusted Browser

Use a private browsing window to verify that your two-step verification is actively protecting your account on unrecognized devices.

When you select 'Remember me' during a Microsoft sign-in, the browser saves a persistent trusted token. Signing out only ends your active session but does not delete this token. To confirm your MFA is working, you must test it in an environment without this token.

Open a Private Browsing Window

Launch your web browser and open a new Incognito (Chrome), InPrivate (Edge), or Private (Safari/Firefox) window.

Navigate to Microsoft Login

Go to the Microsoft account sign-in page (account.microsoft.com) and enter your email address.

Verify the Authentication Prompt

Proceed with the login. Because this private session has no saved cookies, Microsoft should now correctly prompt you for both your password and your second verification method.

Test Two-Step Verification on an Untrusted Browser

Session Tokens: If you are successfully prompted for your MFA code in the private window, your account security is functioning exactly as intended.

Solution 2

Revoke Trusted Devices in Security Settings

Clear your trusted device history to force Microsoft to ask for a two-step verification code on all your devices.

Free Microsoft Office alternative

Try WPS Office as Your Lightweight Productivity Solution

If you frequently struggle with complex account verifications and forced logins just to edit a document, consider switching to WPS Office. It provides a fast, reliable, and completely free alternative to Microsoft Office that works right out of the box.

1. Download and Install: Visit the official WPS website to download the free installer and follow the on-screen instructions to set it up on your device.
2. Open Your Office Files: Launch WPS Office and directly open your existing Microsoft Word, Excel, or PowerPoint files without worrying about formatting issues.
3. Edit and Save Locally: Enjoy offline editing capabilities and save your documents directly to your local drive without requiring cloud authentication.

Completely free to use with rich document editing featuresFully compatible with Microsoft Office formats like .docx, .xlsx, and .pptxLightweight installation that does not require complex online account syncingFamiliar user interface ensuring a seamless migration from Microsoft Office

Frequently Asked Questions

Why doesn't signing out of my Microsoft account clear my trusted device status?

When you check 'Remember me' or 'Don't ask again on this device', Microsoft stores a persistent authentication token in your browser's cookies. A standard sign-out only terminates your active session but retains this trusted token, meaning your subsequent logins on that specific browser won't require a second verification step.

How do I stop Microsoft Authenticator from logging me in without a password?

If you are using passwordless sign-in with the Microsoft Authenticator app on a trusted device, the app relies on your device's security (like FaceID, fingerprint, or a PIN) as the primary verification. To require a password again, you must remove the passwordless account option from your Microsoft Advanced Security settings.

Can I view a list of all my trusted devices?

Microsoft does not provide an itemized list of every browser or device marked as trusted. However, you can manage them collectively by visiting the 'Advanced security options' in your Microsoft account and selecting the option to sign out of everywhere or revoke all trusted devices at once.

Login & Account Issues