Sign-in request you didn't ask for? Deny it

How it normally works. When you sign in to your work account, you confirm it's you on your phone, using Microsoft Authenticator or Duo. With Microsoft Authenticator, you type the number shown on your sign-in screen into the app. That way, only a sign-in you started can be approved.

When it's not you. A request you didn't start usually means someone has your password and is trying to sign in. Approving it would let them in.

What to do

1. Deny the request, or ignore it if there's no option to deny. Never approve it, even if requests keep coming.
2. Don't type in a number you can't see on your own screen.
3. Call us on 707-755-8000, at any time. We'll reset your password, check for anything unusual on your account, and stop the requests.

What it's not. A request you started yourself on a new computer or browser is normal. If you're not sure whether you started it, deny it and sign in again.

Got a new phone? Move your authenticator before you wipe or trade in the old one. Contact us and we'll help you set it up.