A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
Based on the available information, recovery is only possible through Microsoft’s automated account recovery and security-info replacement flows. There is no separate “identity quiz” or manual verification path that can bypass missing security keys, Authenticator, or recovery info.
Use the following options, depending on what still works for the account.
- If the password is still known but some security info is lost
- Go to the Advanced security options page of the Microsoft account: Sign in.
- Select Add a new way to sign in or verify and add a new phone number or email.
- Enter the verification code sent to that new method and select Next.
- Expand the old security info entries that are no longer accessible and select Remove, then confirm.
- Do not remove all existing security info at once, or the account may be restricted for 30 days.
- If the password is known but all security info is lost
- Start signing in to the Microsoft account: Sign in.
- At the Verify your identity prompt, select I don't have any of these.
- Follow the prompts to replace the security info.
- After replacement, there is a mandatory 30‑day waiting period before normal sign-in is restored. During this time, the account is protected and support cannot override the wait.
- If the password is not known and no security info works
- Use the Microsoft account recovery form. First review: Help with the Microsoft account recovery form.
- Then submit the form via Recover account.
- Use a device and location previously used with the account and provide as many accurate details as possible (old passwords, contacts, subject lines, etc.).
- If rate limits or daily limits are hit, wait the required cooldown (typically about a day) before trying again; repeated attempts during the lockout can extend the wait.
- If the account was hacked/compromised
- Follow the official hacked-account guide: How to recover a hacked or compromised Microsoft account.
- This uses the same automated flows (sign-in helper and recovery form). If the attacker has fully replaced the security info and the recovery form cannot verify ownership, there is no alternative manual recovery method.
- When recovery keeps failing
- If the recovery form or sign-in helper returns errors or “too many attempts,” wait for the lockout period to expire completely before trying again.
- When retrying, use:
- A familiar device and network.
- An InPrivate/Incognito browser session if previous attempts failed.
- The most complete and accurate information possible.
If the automated recovery and security-info replacement processes cannot verify ownership (especially after a compromise where all security info was changed), Microsoft support and community moderators cannot override or manually unlock consumer Microsoft accounts.
References:
- Troubleshoot Microsoft verification code issues
- How to recover a hacked or compromised Microsoft account
- Microsoft account has been locked
- Unblock my Outlook.com account
- my microsoft account has been compromised - Microsoft Q&A
- My account got hacked - Microsoft Q&A
- Locked out of my Outlook account and recovery options not working - Microsoft Q&A
- My personal hotmail account hacked by hacker with authentication app enabled. - Microsoft Q&A