A Microsoft file hosting and synchronization service.
Yes, it is possible to try to regain access using the email address, and yes, there is some risk that the new owner of the old phone number could receive verification codes.
To regain access without the old phone number:
- Start the normal sign-in or password reset flow for the Microsoft account.
- When asked to verify identity and shown options (old phone, email, etc.), choose I don't have any of these if the phone option is unusable.
- Follow the prompts to use the account recovery form instead. Before doing this, review the guidance in Help with the Microsoft account recovery form and then submit the form with as much accurate information as possible about the account (previous passwords, contacts, email subjects, etc.). Microsoft will review and respond, typically within 24 hours.
- If you still know the password but just lost access to the old phone number, and you can sign in using another method (for example, a code to your email), then:
- Go to the Advanced security options page.
- Select Add a new way to sign in or verify and add a new email or phone.
- After confirming the new method, remove the old phone number from Security info.
Regarding the risk with the new owner of your old phone number:
- If the old number is still listed as security info on the account, any verification code sent by SMS will go to the new owner.
- If that person also knows (or guesses) the account password or other required details, they could potentially use those codes to try to access or change the account.
- To eliminate this risk, the old phone number must be removed from the account’s security info as soon as access is regained, and a new, trusted method (new phone or email) should be added.
If you do not know the password and cannot use any existing security info, the only supported path in the context is to use the Microsoft account recovery form and follow its guidance.
References: