• Random_user@lemmy.world
    link
    fedilink
    English
    arrow-up
    32
    ·
    1 year ago

    That must be why I’ve been getting a million 2fa emails recently asking me to verify my Microsoft account sign in.

    • NathA
      link
      fedilink
      arrow-up
      10
      arrow-down
      1
      ·
      1 year ago

      Hmm, by using Authy I wouldn’t receive these. They’d just be asked for the current code and unable to proceed.

      On the one hand I’m happy not getting spammed like you with 2fa requests. On the other, I think I’d like to know if any of my user/password pairs have been compromised.

      • XTornado@lemmy.ml
        link
        fedilink
        arrow-up
        4
        arrow-down
        1
        ·
        1 year ago

        Tbh I am not sure what he is talking about. I didn’t know Microsoft had 2FA by mail. They have their authenticator app, sms, physical key, windows auth (or whatever is called that the PC acts as key/2fa). I know of one case where you can get invited to an org and if you don’t have an azure account the login is done by a mail they sent you, but I wouldn’t call that 2FA. But I guess here is a mail version I didn’t know about.

        • NathA
          link
          fedilink
          arrow-up
          2
          ·
          1 year ago

          Oh you’re right. I thought it was notification spam to the phone/watch that @Random_user was complaining about.

          There is an email MFA method for Hotmail/LiveID accounts, but M365 doesn’t have email as an authentication method. There’s Authenticator Lite, which comes through as a notificataion through the Outlook App on the phone, though. Not so many organisations use it because it’s fairly new and we’ve mostly been doing MFA for years by now.

          • beetus@lemmy.world
            link
            fedilink
            arrow-up
            3
            ·
            1 year ago

            Pretty sure the person who said they are getting 2fa emails was meaning that they are getting email alerts from Microsoft that says “we blocked these logins. Were they you?”

            Some service providers do this when they see large attempts to access accounts fail due to 2fa blocks.