A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
Do not approve any sign-in prompt that was not initiated. Select Deny on unrequested prompts.
To reduce the ongoing prompts and secure the account:
- Change the account password immediately If there is any chance the account is being targeted, change the password and review security settings.
- Review recent sign-in activity Go to the Recent activity page and check for unfamiliar sign-ins, devices, browsers, or locations. A location alone can be misleading because IP-based location can be inaccurate, especially on mobile networks. If any activity is not recognized, secure the account and change the password.
- Use stronger sign-in methods For personal Microsoft accounts, Microsoft is phasing out SMS for authentication and recovery. Prefer passkeys, verified email, or Microsoft Authenticator instead of SMS.
- Avoid repeated verification attempts Repeated requests for codes or repeated sign-in attempts can trigger temporary blocks or delay verification delivery. If blocked, avoid repeated retries.
- If verification is blocked, try these recovery steps
- Try another verification method already connected to the account.
- Try another network, such as switching between Wi‑Fi and cellular.
- Wait 24 hours before retrying; if needed, wait longer, up to 1 week.
- If the account is temporarily blocked Unblock it by resetting the password.
- If access to security info has been lost
- If access remains to at least one security method, add a new sign-in or verification method in Advanced security options, confirm it, then remove the old one.
- Do not change all security info at once. That can restrict the account for 30 days.
- If access to all security info is lost, start sign-in, select I don't have any of these, and follow the replacement process. After replacement, there is a 30-day wait before sign-in is allowed.
- If prompts continue even after password changes A practical way to reduce repeated prompts is to change the sign-in alias used for the Microsoft account, make the new alias the primary sign-in alias, and disable sign-in for the old alias while keeping it for email. This can stop repeated sign-in attempts against the old exposed sign-in name.
If the account is a work or school account, review sign-in activity in My Account under Recent Activity and update Security info if suspicious activity appears.
References:
- Check the recent sign-in activity for your Microsoft account
- Troubleshoot Microsoft verification code issues | Microsoft Support
- Microsoft to stop sending SMS codes for personal accounts | Microsoft Support
- Unblock my Outlook.com account | Microsoft Support
- What does “Security info change is still pending” mean? | Microsoft Support
- [Work/school](https://support.microsoft.com/accounts-billing/security/using-outlook-mobile-to-sign-in#frequently-asked-questions)
- View your work or school account sign-in activity from My Sign-ins | Microsoft Support
- How to block badactors who trying to hack my account? - Microsoft Q&A
- I keep getting login requests and I can't stop them - Microsoft Q&A