Windows 10: Passwordless account but still receive authentication attempt

I am passwordless with Microsoft, I suddenly received a Microsoft authentication request and denied it as I wasn't logging in. Activity shows attempt from IP out of San Jose other side of the country from me. When I click secure my account I am told no worry as they didn't gain access. If I am passwordless so all someone needs is my email and then can start a 2fa fatigue attack. Is this really all that more secure. Should I just go back to a very long random password with 2fa as I had before.Please provide legitimate advice here.Thank you,

:)

 

do i still need two factor authentication with passwordless account

Do I still need two factor authentication with a passwordless account? It seems redundant considering the Authenticator is performing both functions. As you roll out the new passwordless account feature, perhaps it would be best to also turn off 2FA. What am I missing?

It also seems like a "Product" that could be listed in the topics selection could be for "Microsoft Account" questions. This question I have is not really Windows related, yet there is no better option. Just a suggestion.

 

Outlook account and MS Authenticator - Disable Passwordless?

I was testing my Outlook email account with MS Authenticator app and when I enter my Username in the Outlook.com page, after that, I get a notification to Deny or Approve the sign in request. This is all great.

But I do need to have the option to enter my password as well right after entering my username (email) and then receiving the deny or approve notification.

How can I disable Passwordless logon? Under the MS Authenticator app settings there is no option to disable passwordless.

I still want to be able to use my password along with the MS Authenticator app as well because If I don't, I am afraid I will forget it. And also, I may have to remember the password in case something goes wrong with my account.

 

Passwordless Sign-in for MS account

On my desktop running Win10, 22H2, OS build 19045.2364 I'm the admin of the local account with no user accts.

While I was reading one of Shawn's excellent tutorial's:
Enable or Disable Passwordless Sign-in for Microsoft Accounts in Windows 10,
I was hoping to find where to disable Passwordless Sign-in for MS accounts.

I have it enabled because the sign-in screen into my Microsoft account lists "other sign-in options" (or something to those words). I also verified in the registry and netplwiz that its enabled.

When selecting other sign-in options, a security key that I set up, first of all, disappeared all by itself recently. The security key is only one of two sign-in options for Passwordless sign-in that I ever set up. The other option was a Windows Hello PIN which I had up until this year but its no longer an option after I removed it myself.

So where the problem comes in is after the authentication option using a security key is re-added, it ends up disappearing after about 24 hours later. When that happens, it leaves zero Passwordless Sign-in options to use (Windows Hello PIN was removed by myself in June). But Passwordless Sign-In will still remain enabled even though I can't sign-in Passwordless with any options. I'm left with signing in by using 2-step verification processes that I've had.

Perhaps this is grasping at straws. I was thinking if there's a switch to disable Passwordless Sign-in to Microsoft Accounts that's turned off first, maybe then the security key can successfully be re-added permanently.