MFA & Verification Issues

How to Fix Microsoft 365 MFA Not Prompting on a New Device

Rana Garcia Oct 21, 2026 868 views

Question details

Users are not receiving a Multi-Factor Authentication (MFA) prompt when logging into Microsoft 365 from a newly used computer or mobile device.

Product: Microsoft 365
Device & OS: not provided
Scenario: Signing into Microsoft 365 services on an unfamiliar device where an MFA prompt is expected but bypassed.
Observed behavior: The system bypasses the expected MFA prompt and allows login directly, often due to organizational settings like trusted locations, remembered sessions, or Conditional Access policies.

Before you start

Ensure you have Microsoft Entra (formerly Azure AD) Global Administrator or Conditional Access Administrator privileges, as adjusting organizational MFA policies requires administrative access.

Solution 1Recommended

Configure Conditional Access Policies in Microsoft Entra

Review and adjust your organization's Conditional Access policies to ensure multifactor authentication is strictly required during sign-ins.

Microsoft 365 MFA prompts are heavily controlled by Conditional Access settings. If a user connects from a trusted network, a compliant device, or a previously trusted session, the policy might suppress the MFA prompt to improve user experience.

Access Microsoft Entra

Log into the Microsoft Entra admin center using an account with administrator permissions.

Navigate to Conditional Access

In the left-hand navigation menu, expand 'Protection' and select 'Conditional Access'.

Review Active Policies

Select the policy applied to the affected users. Check the 'Conditions' section to see if locations or device states are bypassing the MFA requirement.

Enforce MFA

Under 'Access controls', click on 'Grant' and ensure that 'Require multifactor authentication' is checked. Save the policy changes.

Policy Propagation Time: Changes made to Conditional Access policies may take a few minutes to propagate across all Microsoft 365 services.

Solution 2

Revoke Existing User Sessions

Force the system to clear any remembered MFA trust tokens by revoking the user's active sessions.

Solution 3

Clear Browser Cache and Sign Out Manually (For End-Users)

If you are an end-user without administrative access, you can manually force a new authentication prompt by clearing saved session tokens from your browser.

Free Microsoft Office alternative

Switch to WPS Office for a Hassle-Free Productivity Experience

Managing complex Microsoft 365 administration, Conditional Access policies, and MFA configurations can be tedious. If you prefer a straightforward, localized productivity suite without mandatory cloud sign-ins, WPS Office provides an exceptional alternative.

1. Download the Software: Visit the official WPS Office website and click the free download button for your operating system.
2. Install WPS Office: Run the downloaded installer file and follow the quick setup instructions on your screen.
3. Open and Edit Files Instantly: Launch WPS Office to immediately start creating or editing your Microsoft Office files without mandatory administrative login hurdles.

Fully compatible with Microsoft Word, Excel, and PowerPoint document formatsWork offline locally without being interrupted by complex cloud authenticationLightweight application with fast loading times and a highly familiar user interfaceFree to download and use with built-in powerful PDF editing tools

microsoft office alternative - wps office

Frequently Asked Questions

Why does Microsoft 365 remember my device for MFA?

Microsoft 365 can remember a device if an administrator has configured trusted locations or enabled the 'Remember Multi-Factor Authentication on trusted devices' feature, which allows users to bypass prompts for a set number of days.

Can a VPN prevent an MFA prompt on a new device?

Yes. If your VPN routes your internet traffic through a corporate IP address that your IT administrator has marked as a 'Trusted IP' in Microsoft Entra, the system will not prompt for MFA because the connection is considered secure.

How do I change my default authentication method?

You can change your default method by navigating to 'mysignins.microsoft.com', selecting 'Security info' from the left menu, and clicking 'Change' next to your Default sign-in method to select a preferred option like the Microsoft Authenticator app.

What should I do if my MFA prompt is being sent to an old phone?

If you cannot access the old phone, you must contact your organization's IT helpdesk or global administrator. They will need to require you to re-register for MFA so you can set up authentication on your new device.

Login & Account Issues