Suspicious Login Issues

How to Handle Unexpected Microsoft Authenticator Prompts and Prevent Unauthorized Registration

Maira Mehtab Sep 27, 2026 869 views

Question details

The user is receiving unexpected Microsoft Authenticator prompts and wants to know if an attacker is trying to register the app on another device.

Product: Microsoft Authenticator
Device & OS: not provided
Scenario: Receiving unexpected multi-factor authentication (MFA) or sign-in prompts without actively attempting to log into the account.
Observed behavior: Unexpected sign-in requests or registration prompts appear on the Authenticator app, indicating a potential unauthorized login attempt.

Before you start

Do not approve any unexpected Microsoft Authenticator prompts on your device. Immediate denial is the critical first step in protecting your account from unauthorized access.

Solution 1Recommended

Deny the Prompt and Secure Your Account

Take immediate action to block the unauthorized login attempt and secure your Microsoft account from attackers.

If you receive a prompt when you are not actively logging in, an attacker may have compromised your password and is trying to bypass two-factor authentication. This is sometimes called 'MFA fatigue', where attackers spam prompts hoping you will accidentally approve one.

Deny the Authentication Request

Tap 'Deny' on the unexpected Microsoft Authenticator prompt immediately. Never approve a request that you did not explicitly initiate.

Change Your Password

Log into your Microsoft account from a secure, trusted device. Navigate to the security settings and change your password to a strong, unique combination.

Review Recent Sign-in Activity

Navigate to the Security section of your Microsoft account dashboard and review your 'Recent activity' for any unfamiliar locations, browsers, or IP addresses.

Remove Unfamiliar Devices

Under the Devices or Security settings, look for registered authentication methods and remove any unrecognized devices linked to your account.

Work or School Accounts: If the affected account is for a work or school organization, contact your IT administrator immediately to report the suspicious activity so they can take enterprise-level security measures.

Free Microsoft Office alternative

Need a Secure and Free Office Suite?

While resolving Microsoft account security issues, you may want to explore WPS Office as a lightweight, secure, and free alternative. It offers excellent compatibility with Microsoft Office formats, a familiar user interface, and allows for robust local document editing without relying on complex online account integrations.

1. Download WPS Office: Visit the official WPS website and download the free installation package for your operating system.
2. Install the Application: Run the downloaded installer and follow the simple on-screen instructions to set up the software.
3. Edit Your Documents Offline: Open your existing Microsoft Office files securely on your local device without needing an active online account.

100% compatible with Microsoft Word, Excel, and PowerPoint formats.Allows secure local document editing and password protection without mandatory cloud sync.Lightweight and fast, requiring minimal system resources to run efficiently.Familiar user interface ensuring a seamless migration from other Office software.

microsoft office alternative - wps office

Frequently Asked Questions

What happens if I accidentally approve a suspicious Authenticator prompt?

If you approve an unexpected prompt, the attacker may gain access to your account. You should immediately log in, change your password, and select the option to sign out of all active sessions in your security settings.

Can an attacker register a new Authenticator app without my password?

No, registering the Authenticator app on a new device typically requires the attacker to know your account password and potentially pass another form of verification.

Why am I receiving multiple Authenticator prompts in a row?

This is a tactic known as 'MFA fatigue' or 'prompt bombing.' Attackers repeatedly send authentication requests hoping you will eventually approve one out of frustration or by mistake. Deny all requests and change your password immediately.

Microsoft Office Security Issues