I've been getting a lot of notifications from Microsoft Authenticator lately, indicating there are multiple login attempts to my account every day. These attempts don't seem linked to anything I'm doing. I'm worried that someone might be trying to access my account. I've enabled multi-factor authentication (MFA) and taken other protective steps. Is there anything else I can do, or am I just going to have to keep dealing with these login attempts?
3 Answers
Consider signing out from all sessions and devices, and change your password immediately. It sounds like someone might have your credentials and is getting blocked by MFA. If this continues after changing the password, you might want to check if one of your devices is compromised and think about resetting or rebuilding it.
Unfortunately, what you’re experiencing could be a case of MFA fatigue, which attackers sometimes use to gain access. You might want to read more about it here [mfa fatigue attacks](https://bravertechnology.com/mfa-fatigue-attacks/).
One option is to create a new alias for your account, set it as the primary login, and then disable the old alias to avoid further login attempts. This should help minimize those notification pop-ups from the Authenticator.
Exactly! Just make sure the old alias isn't used anywhere and keep it to yourself.