Passwordless account but still receive authentication attempt

[M4zzterTac]

I am passwordless with Microsoft, I suddenly received a Microsoft authentication request and denied it as I wasn't logging in. Activity shows attempt from IP out of San Jose other side of the country from me. When I click secure my account I am told no worry as they didn't gain access. If I am passwordless so all someone needs is my email and then can start a 2fa fatigue attack. Is this really all that more secure. Should I just go back to a very long random password with 2fa as I had before.Please provide legitimate advice here.Thank you,

Continue reading...