Windows: «Sign-in was not approved»

Symptom

The Windows sign-in screen shows «Sign-in was not approved» with «The request was declined on the phone or it expired. You can ask for a new approval.»

Cause

After the password, Windows sent a request to your phone, and that request:

• expired without an answer (the phone did not get the alert, or you did not open it in time);
• was declined on the phone;
• was reported as "it wasn't me";
• received a number different from the one on the Windows screen three times;
• was cancelled on the computer.

The administrator sees the reason under «Manage» › «Computers», in the computer's «Sign-ins» history.

Fix

1. Choose «Try again» or «Send again» to ask for a new approval.
2. Open the app on your phone if the notification does not appear; the request is under «Pending requests».
3. Type on the phone exactly the number Windows shows.
4. With no network on the phone, choose «Use the app code» and type the six-digit code.
5. If you do not have your phone, choose «Can't use your phone?» and follow the helpdesk recovery.

If the notification never arrives, see Requests do not reach my phone.

When to escalate

If you did not ask to sign in and got a Windows request on your phone, someone has your password: decline with "it wasn't me" and tell your security team.