IT ISSUE · SECURITY AND THREATS
Unexpected MFA approval request
An approval request nobody asked for. Deny it, then change the password from a device you trust.People dismiss this one most often and it should worry them most. Treat this as serious. In most setups a prompt only appears after the correct password has been entered, so the safest assumption is that someone else has it. If nobody in your business was signing in, assume somebody else is standing at the last door.
What it means in practice
- Assume the password is known to someone else.
- Repeated prompts are somebody retrying, not a fault.
- Prompts late at night are a common pattern.
- The same password elsewhere is now also exposed.
- Approving one ends the protection entirely.
Deny it, then change the password from a device you trust
We review the sign-in attempts and where they came from, the account's registered methods and any changes made to it. Where we're permitted, we help secure it and check what else the account can reach. That review happens when you tell us, not because we noticed: nobody is watching your sign-ins for you.
Do not approve a prompt to stop it repeating. People do, because it is late and the phone keeps buzzing, and that single tap is the whole difference between an attempt and an intrusion. Deny it, leave it denied, and change the password from a device you are certain of rather than the phone doing the buzzing.