You try to sign in to Outlook.com, OneDrive, Xbox, or Microsoft 365, and your Microsoft account stops you at the door. An account lock, a forgotten password, and a failed verification request each need a different fix. Start with the message on your screen, then follow the matching recovery route below.
Start with the account lock notice
Open account.microsoft.com in a browser on your computer, phone, or tablet.
Sign in to the affected account.
Complete Let's prove you're human if that challenge appears.
Follow the remaining instructions on your screen. The challenge sequence depends on your account.
If the lock notice does not offer Let's prove you're human, select the aka.ms/ link displayed in that notice.
Submit the reinstatement form that opens. Microsoft Online Safety reviews the request and responds by email. This is separate from the account recovery questionnaire.
Avoid duplicate reinstatement submissions while you wait for a response.
Reset the password when that is the problem
A password reset fixes a forgotten password; it does not overturn an account suspension.
Open Microsoft's password-reset page, or select Forgotten your password? at sign-in.
Enter your account email address or other account identifier.
Select Next.
Choose an available verification email address you can access.
Confirm the address information Microsoft requests.
Select Get code.
Enter the code from your verification email.
Select Next.
Enter a new password.
Continue to complete the reset.
If the sign-in error is unclear or you cannot complete the reset, open Microsoft's Sign-in Helper.
Enter your account email address or mobile number.
Follow the diagnosis and recovery route presented.
Try another verification method you already set up
Use an existing Authenticator setup, passkey, or saved recovery code when your usual verification method is inaccessible. These options do not override an account suspension.
For Microsoft Authenticator, enter your username at sign-in.
Continue to the authentication screen.
Select Send notification. If the screen presents another method, use the alternative sign-in link to choose Authenticator approval.
Open the notification or the Authenticator app on your phone.
Match the displayed number when requested.
Tap Approve. Push approvals need internet access; previously configured verification codes work offline.
For an existing passkey, choose your previously registered passkey during sign-in.
Complete the authentication requested by its storage provider, such as your face, fingerprint, device PIN, or physical security key. The dialogs depend on your device, browser, and credential provider.
For a saved 25-digit recovery code, open your Microsoft account sign-in page.
Follow Other ways to sign in > Use my password > Forgot password? > Use a different verification option > I don't have any of these. Screens vary by account configuration.
Enter your saved recovery code when requested.
Update the password as prompted. Microsoft specifies a 30-day wait for changes to take effect on accounts with two-step verification.
Replace lost security contacts and allow for the wait
If you know your password but cannot access any existing security contacts, begin signing in. At Verify your identity, select I don't have any of these and follow the replacement process.
Replacing this security information carries a 30-day wait that Microsoft cannot expedite unless you cancel the request.
If you requested the change and regain access to your original verification methods, sign in to the account's Security page and select cancel this request. Signing in with your original security information during the waiting period also cancels the replacement.
If someone else changed your security information, select let us know in the pending-change notice and follow the reporting process.
Use the recovery questionnaire when ordinary verification fails
The recovery questionnaire checks account ownership when ordinary password verification is unavailable.
- 1.Try Sign-in Helper first by entering your account email address or mobile number and following its diagnosis.
- 2.If ordinary verification remains unavailable, open the account recovery form, preferably from a familiar device and location. This form is separate from a suspension appeal and cannot bypass two-step verification when all alternate verification methods are inaccessible.
- 3.Provide the affected account and a working contact email address.
- 4.Answer the ownership questions with previous passwords and relevant Microsoft service history, then submit the form.
- 5.Check your contact email for the result. Microsoft's usual response time is within 24 hours. After an unsuccessful attempt, improve your answers before retrying, with no more than two attempts per day.
Give blocked verification requests time to clear
Try another verification method already connected to your account if a code or approval request is temporarily blocked. These steps address temporary verification failures, not enforcement suspensions.
Check the verification mailbox for the expected email.
Check that mailbox's junk folder.
Switch between Wi-Fi and cellular data, or try another network.
Stop repeated requests for 24 hours before trying again.
If the block persists, extend the pause. Microsoft's troubleshooting guidance recommends a longer wait, up to a week.
For an actual account lock, follow the sign-in challenge or reinstatement route above, and do not rely on older any-phone-number instructions because Microsoft is phasing out SMS authentication and recovery.
Separate a Windows PIN problem from an account lock
Your Windows Hello PIN is separate from your Microsoft account password. Resetting the PIN repairs access to the device; it does not lift a Microsoft account suspension.
At the Windows sign-in screen, select I forgot my PIN and verify your Microsoft account. If that option is absent, use Sign-in options to sign in with your password.
If you forgot your Microsoft account password, select I forgot my password on the Windows sign-in screen. Complete the online verification and password-reset process.
If you can already enter Windows using your PIN, open Settings > Accounts > Sign-in options > Password > Change. Choose Forgot my current password and complete account verification.
Recover a work or school account through your organization
Your organization's recovery flow handles work or school account access.
Open mysignins.microsoft.com/security-info.
Select Can't access your account?.
Enter your organizational username.
Complete the anti-bot check.
Select Next.
Complete the required verification. Self-service recovery requires your organization to enable it and you to have registered verification methods beforehand.
If self-service recovery is unavailable, select Contact your administrator.
Ask your organization's administrator for help restoring access.
Add a backup sign-in method after recovery
Once you can authenticate again, register another accessible method for future sign-ins and recovery.
- 1.Open your Microsoft account security page and select Manage how I sign in.
- 2.Select Add a new way to sign in or verify.
- 3.Register an accessible recovery email, authenticator, or passkey.
- 4.Complete the verification required for the new method.
Frequently Asked Questions
How do I reach Microsoft Support for sign-in help?
Select Contact Microsoft Support from Microsoft's account-lock help page, describe the problem, and select Get Help. Choose Contact Support if offered. Support can diagnose sign-in problems, but it cannot override identity verification or directly change protected account details.
What if Microsoft says my username has been turned off?
Sign in with another enabled email alias for the same account. If you do not know one, select Forgot your username?, supply the blocked alias, and verify the code sent to the primary alias. Microsoft then displays aliases permitted to sign in. After gaining access, open Your info > Sign-in preferences, permit the desired alias, and select Save. This does not bypass an account-wide suspension.
Does installing Microsoft Authenticator recover my account?
No. Installation alone does not recover an account. You need an already registered method, a usable existing backup, or successful account verification. Backup restoration must stay on the same platform, Android to Android or iOS to iOS. Passwordless accounts restore only their names and require sign-in again.
Can I reopen a Microsoft account I previously closed?
Within the selected 30- or 60-day reopening period, sign in at account.microsoft.com and enter the requested security code. An account permanently deleted after that period cannot be reopened.