Managing personal Outlook.com account settings, security, and privacy
Because the existing security info (old email and phone) is no longer accessible, the only supported path is to replace that security info and wait out the security period; support cannot bypass or shortcut this.
Since sign-in on the desktop still works, use that access to update security info as much as possible, and then wait for the 30‑day protection window to complete.
Follow these steps based on the documented flows:
- If at least one security method still works
- On the desktop where sign-in works, go to the Advanced security options page of the Microsoft account (via the account’s security pages).
- Select Add a new way to sign in or verify and add a current email or phone.
- Confirm it by entering the code sent to that new method.
- After the new method is confirmed, expand each outdated method (old phone/email) and select Remove, then confirm Remove again.
- Do not remove all security info at once; doing so can trigger a 30‑day restriction on the account.
- If none of the existing security methods can be used
- Start sign-in to the Microsoft account.
- At the Verify your identity prompt, choose I don't have any of these.
- Follow the prompts to replace security info with a new email or phone.
- After submitting, the account enters a 30‑day protection period. During this time, the old security info is still technically usable; if it is used, the pending change is canceled.
- Once the 30 days have passed and the change completes, sign in again and use the new security method to verify. At that point, sign-in on the iPhone Outlook app should work once the account is re-added.
- If the password is ever lost and no security info works
- Use the account recovery form as documented under Help with the Microsoft account recovery form and submit via the Recover account link.
- About live support
- For consumer Microsoft accounts, account recovery and security-info replacement are automated for security reasons. Support agents and forum moderators cannot override the 30‑day waiting period or manually unlock or change security info.
Key points:
- Use the working desktop session to add a new verification method if any current method still works.
- If no methods work, use I don't have any of these and complete the replacement process, then wait the required 30 days.
- Avoid changing or removing all security info at once unless prepared for the 30‑day restriction.
References: