Windows 10: Authenticate with authenticator, approve your authenticator login attempt on your authenticator

Why for the love of God do I have to wait 30 days just to change my phone number? Are identity thieves proven to be impatient and give up after 30days? This is some apple level nonsense. I know my password. I'm logged in. I use this device everyday. Authenticate with authenticator app, confirm with authenticator app. Oh to use the authenticator you need to verify your login with the authenticator. This is physically painful it's so dumb

:)

 

key authentication

Key authentication is the recommended method for security, reject all password logins

If you lose the key use physical or remote console (IPMI)

 

key authentication

Quick poll! I finally got around to securing my remote VM by disabling password authentication and using key authentication only for SSH. Curious if others do the same.

 

Windows Microsoft account authentication

I have a valid Microsoft account and a Windows 10 PC with Hello/PIN account login enabled. I also have the Microsoft Authenticator app installed on an iPhone and configured for the Microsoft account. Additionally, I have two step authentication configured
for the Microsoft account. With all of that said, I have become very exasperated while trying to unravel the various authentication paths (and their security implications) through this multi level login security scheme. I find the associated account security
documentation to be woefully inadequate. Thus, I would like to pose the following list of questions for starters.

1. Does Windows Hello/PIN amount to a two step verification login procedure for my Microsoft account?

2. Does approving a Microsoft Authenticator login attempt (without two step verification explicitly set up)

amount to a two step verification login procedure for my Microsoft account?

3. Does approving a Microsoft Authenticator login attempt (with two step verification explicitly set up)

amount to a two step verification login procedure for my Microsoft account?

4. If answers to both 2 and 3 are yes, then what does explicit set up of two step authentication do?

5. Does a coherent, comprehensive document explaining Microsoft account security configuration exist somewhere?

6. If the answer to 5 is yes, wherer is it?

Thanks in advance.