Outlook code request

[hab1966]

Ive received a number of "Are you trying to sign in" alerts on my mobile outlook over the last hour or so.

I just hit the deny button and leave it.

However, should this be triggered by just repeated rogue og-in attempts?

I use a very long random password and also use an authenticator app to normally log in, so am confused by what is triggering these sign in alerts.

[illmonkey]

Are they even legit? Might be asking you to "reset" your password, then you put the current one in on their site. You think you've changed your password, but you've just given them the real password, then they login.

[hab1966]

No they are legit, its part of Microsofts security process.

They are being triggered by somebody attempting to access my account, Microsoft show a number on the screen of the PC and then ask (me) to pick that number from my Android Outlook App, from a group of three numbers. I then have to further authenticate the access with biometris.

I deny access to that request, so they dont gain acess, which is fine.

But this wouldnt happen if they enter the wrong passowrd, only if (1) they enter the corect password or (2) they request the mobile code. My password is random and >15 charactrers.

Needless to say ive changed password but have no idea how that might have been compromised,