Microsoft account sign-in immediately says “Too many attempts” across Outlook, Xbox app, and Minecraft Java even after password reset

Joshua O'Sullivan 0 Reputation points
2026-05-17T21:08:21.2766667+00:00

I’m trying to recover access to an old Minecraft Java Edition account that was originally created using my mother’s Microsoft account.

At first, I thought this was only a Minecraft Launcher issue because the launcher immediately said:

“Sign in is blocked. You’ve tried to sign in too many times with an incorrect account or password.”

However, after troubleshooting further, I discovered the same issue also affects:

  • Outlook sign-in
  • Xbox app sign-in
  • Xbox/Microsoft gaming authentication generally

Important details:

  • The error appears immediately on the FIRST login attempt, even after months of not trying
  • I believe the password being entered is correct
  • Password resets have already been completed successfully
  • The issue persists even after the password reset
  • I can sometimes access the accounts only via recovery email verification instead of normal password login
  • The same behaviour is also happening with my own personal Microsoft account, not just the Minecraft-owning account

Things I have already tried:

  • Resetting Microsoft account passwords
  • Clearing Minecraft launcher credentials/cache
  • Removing Xbox/Microsoft credentials from Credential Manager
  • Repairing/resetting Xbox app and Gaming Services
  • Reinstalling Gaming Services
  • Trying a different network (mobile hotspot)
  • Trying different browsers/devices
  • Restarting PC multiple times

Additional observations:

  • The Xbox app also fails to sign in with the same “too many attempts” style behaviour
  • Outlook web login can sometimes force recovery verification instead of accepting the password normally
  • This makes me think the problem is related to Microsoft/Xbox authentication or account security throttling rather than Minecraft itself

At this point, I’m trying to determine:

  1. Whether this is a Microsoft account security/rate-limit issue
  2. Whether Xbox authentication services are specifically blocked
  3. Whether there is a known issue with Windows Web Account Manager / Xbox Identity Provider causing false “too many attempts” errors

Has anyone experienced this across multiple Microsoft services simultaneously, and if so, what ultimately resolved it?

Outlook | Web | Outlook.com | Account management, security, and privacy
0 comments

1 answer

Sort by: Oldest
Most helpful Newest Oldest

  1. AI answer

    2026-05-17T21:08:40.99+00:00

    This behavior matches Microsoft’s automated security protections: repeated or unusual sign-in attempts can trigger temporary blocks or stricter verification across Outlook, Xbox, and other Microsoft services that use the same account.

    From the documented behavior:

    • Microsoft Entra multifactor authentication and Microsoft account security detect unusual activity such as repeated sign-in attempts and may prevent additional attempts to counter security threats. This can present as “too many attempts” or forced use of alternate verification methods even when the password is correct.
    • When this happens, the recommended actions are:
      • Wait and avoid further sign-in attempts for a period (typically at least 24 hours) so the lockout/rate limit can clear. Continuing to try to sign in can extend the block.
      • If possible, use a different verification method (such as a recovery email, phone, or another MFA method) to sign in while the normal password-based flow is throttled.
      • If the account appears blocked due to suspicious activity, use the automated tools provided for consumer Microsoft accounts:
        • For Outlook.com / Microsoft account sign-in issues and blocks, start with the Sign-in Helper described in “Unblock my Outlook.com account”.
        • If the account is blocked or can’t be accessed normally, follow the guidance in When you can't sign in to your Microsoft account (linked from the Outlook unblock article and the unusual sign-in article).
        • If password reset and normal verification options fail, use the Account recovery form from a familiar device and location, and wait for the daily limits and lockouts to reset before submitting again.
    • If alerts or behavior suggest unusual or malicious sign-in activity, review and secure the account:
      • Sign in to the Security basics page and use Review activity to check for unusual sign-ins on the Recent activity page. Mark any activity that was not performed by the account owner and follow the prompts (This wasn't me or Secure your account).
      • Change the password from the Security basics page and ensure it is strong and unique.

    For cases where the account is repeatedly blocked or forced into recovery flows across services even after waiting and resetting the password, the documented options are limited because consumer account recovery and unblocking are fully automated for security reasons. Support agents and forum moderators cannot manually override these protections or unlock accounts; the system must clear the lockout on its own after the cooldown period.

    In summary, the behavior described is consistent with Microsoft account security/rate-limiting rather than a Minecraft- or Xbox-specific bug. The supported resolution path is to:

    1. Stop all sign-in attempts for at least 24 hours (and slightly longer to be safe) on all affected devices and apps.
    2. After the cooldown, sign in via the web (Outlook.com or account.microsoft.com) first, using recovery methods if prompted.
    3. Review recent activity and secure the account (password change, MFA setup) if any unusual sign-ins are present.
    4. If still blocked, use the Sign-in Helper and, if necessary, the Account recovery form from a familiar device/location, respecting daily limits.

    There is no documented manual override or separate Xbox-specific unblock path for this scenario; everything flows through the standard Microsoft account security and recovery mechanisms.

    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

    1 person found this answer helpful.

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.