Why You Keep Getting Microsoft Sign-In Requests (and the Fix)

Getting "New sign-in request for your MIcrosoft account" prompts for your personal Outlook account from countries you've never visited? Someone is spamming the "send a sign-in notification" method on your account, and they don't need your password to do it. In this video I dig through my own personal Microsoft account to work out where these prompts come from, why your password probably hasn't been stolen, and how to switch the spam off for good. We also look at how the sign-in notification method can be abused with a phone call and two typed digits, remove the weaker sign-in methods, set up a passkey, and weigh up whether going fully passwordless is right for you. 🙏 Sponsor my daughter's pull-up challenge: https://getbramley.com/pullups-summer... She's doing 30 pull-ups every single day through July to raise money for her school playground. That's 930 in total and she's nearly 400 in already. I can't even manage one! Anything you can chip in would be hugely appreciated! Chapters: 0:00 Random sign-in requests at 2am 1:00 A quick favour (the pull-up challenge) 1:47 Reviewing my sign-in methods 2:22 How "send a sign-in notification" works 2:57 Two digits is all an attacker needs 3:34 What they can do once they're in 4:20 Removing the sign-in notification method 4:43 Testing what's left 5:18 Setting up a passkey 5:41 Two-step verification and factors explained 7:06 Going passwordless: should you? 8:05 No more spam If this has been happening to you too, let me know in the comments. It got much worse for me over the past few weeks, five or six prompts an hour at its peak. #MicrosoftAccount #MFA #Passkeys #CyberSecurity