Multifactor Authentication (MFA), Reducing Repeated MFA Prompts Recommended Browser Settings for Passkeys and Microsoft Authenticator

Why am I being prompted for MFA multiple times a day? Multi-factor authentication (MFA) prompts are often caused by browser settings that clear sign-in information, block necessary site data, or prevent your browser from maintaining an active session. While MFA helps protect your account, frequent prompts can be frustrating and may interfere with productivity. By using the recommended browser settings below, you can maintain a secure experience while reducing unnecessary sign-in and MFA requests. These settings help maintain trusted authentication sessions while still providing the protection of Microsoft Authenticator, passkeys, and modern phishing-resistant authentication methods.

Recommended Browser Settings

Allow First-Party Cookies

Why: First-party cookies help websites remember that you've already authenticated. If these cookies are blocked or deleted, you may be prompted to sign in and complete MFA again.

Recommended Setting:

  • Allow first-party cookies in your browser.
  • Do not block all cookies.

Block Third-Party Cookies

Why: Third-party cookies are commonly used for tracking and advertising and are generally not required for Microsoft 365 authentication.

Recommended Setting:

  • Enable "Block Third-Party Cookies" or equivalent privacy setting.
  • This improves privacy without impacting passkey or MFA functionality.

Review Automatic Cookie Deletion Settings

Why: Some browsers are configured to clear cookies and site data when closed. This forces a new authentication session the next time you visit Microsoft 365 applications.

Recommended Setting:

  • Avoid clearing cookies and site data on browser exit if you want your sign-in session to persist.
  • If your organization requires automatic clearing, expect more frequent sign-in prompts.

Use a Supported Browser

For the best passkey and authentication experience, use a current version of:

  • Microsoft Edge
  • Google Chrome
  • Mozilla Firefox
  • Apple Safari

Keep your browser updated to ensure compatibility with passkeys and Microsoft Entra authentication.

Enable Passkeys

Passkeys provide a phishing-resistant and user-friendly authentication method that can reduce reliance on passwords and improve the sign-in experience.

Passkeys can be stored in:

  • Microsoft Authenticator
  • Bitwarden
  • Apple iCloud Keychain
  • Google Password Manager
  • Hardware security keys (such as YubiKey)

Browser-Specific Recommendations

Microsoft Edge

  1. Settings → Cookies and Site Permissions
  2. Allow Cookies
  3. Block Third-Party Cookies
  4. Keep "Clear browsing data on close" disabled (unless required by policy)
  5. Enable passkeys through Microsoft Authenticator or your preferred passkey provider

    Google Chrome

    1. Settings → Privacy and Security → Cookies
    2. Block Third-Party Cookies
    3. Allow websites to save and read cookie data
    4. Avoid clearing cookies automatically on exit
    5. Enable passkeys through Chrome Password Manager or your chosen passkey provider

    Apple Safari (macOS and iOS/iPadOS)

    Safari supports passkeys through iCloud Keychain and generally works well with Microsoft 365 and Microsoft Entra authentication. However, some privacy settings can affect how long your authenticated sessions are maintained.

    Recommended Settings

    On macOS

    1. Open Safari → Settings → Privacy
    2. Ensure Prevent Cross-Site Tracking is enabled
    3. Do not use settings or extensions that block all cookies
    4. Avoid regularly clearing website data unless troubleshooting
    5. Keep Safari and macOS updated

    On iPhone and iPad

    1. Open Settings → Apps → Safari
    2. Leave Block All Cookies turned Off
    3. Enable Prevent Cross-Site Tracking
    4. Keep iCloud Keychain enabled if using synced passkeys
    5. Avoid frequently clearing History and Website Data

    Using Passkeys with Safari

    Safari integrates passkeys directly with:

    • Apple iCloud Keychain
    • Microsoft Authenticator
    • Third-party password managers that support passkeys (such as Bitwarden and 1Password)

    When a passkey is available, users can sign in using:

    • Touch ID
    • Face ID
    • Device PIN or password

    This provides a fast, phishing-resistant sign-in experience while reducing dependency on traditional passwords.

    Common Causes of Repeated MFA Prompts in Safari

    You may be asked to authenticate more frequently if you:

    • Enable Block All Cookies
    • Regularly clear browsing history and website data
    • Browse in Private Browsing mode
    • Sign in from multiple devices that do not share passkeys through iCloud Keychain
    • Use privacy extensions that block Microsoft authentication services

    Additional Tips

    Use a Dedicated Work Browser Profile

    Creating a separate work profile in Edge or Chrome helps maintain persistent authentication sessions and reduces sign-in issues caused by personal browsing activity.

    Avoid Private/Incognito Browsing for Daily Work

    Private browsing sessions typically delete cookies and authentication data when closed, resulting in more frequent MFA prompts.

    Don't Manually Clear Browser Data Frequently

    Clearing cookies, site data, and cached authentication information can trigger additional sign-in requests.

    When MFA Prompts Are Expected

    You may still be prompted for MFA when:

    • Signing in from a new device
    • Signing in from a new location or network
    • Your password is changed
    • Your browser cookies are deleted
    • Security policies require periodic reauthentication
    • Risk-based authentication detects unusual activity

     


    Keywords:
    MFA Prompts refresh browser settings 
    Doc ID:
    165423
    Owned by:
    Identity and Access Management G. in University of Illinois Technology Services
    Created:
    2026-11-11
    Updated:
    2026-11-11
    Sites:
    University of Illinois Technology Services