Locked out of Security Settings: Can log into my account but prompt requires verification code sent to lost recovery email

Question

Locked out of Security Settings: Can log into my account but prompt requires verification code sent to lost recovery email

Mohammed 123 0

Hello Microsoft Community,

I need urgent help regarding my Microsoft account security settings.

Currently, I can log into my account without any issues using my correct master password. I have full access to the account itself. However, whenever I try to access sensitive areas—such as setting up the Microsoft Authenticator app or modifying my security info—the system triggers a mandatory verification prompt.

The system insists on sending a verification code to my registered recovery email address. Unfortunately, I have completely lost access to both the primary recovery email and the secondary backup email associated with this account.

Because of this, I cannot complete the verification step to set up the Authenticator app, even though I am already logged in and know my password.

Is there a way to bypass this loop or update my security info manually since I already have active access to the account?

Thank you.

0 comments

1 answer

Your answer

Answer 1

There is no way to bypass the verification prompt or manually change security info without completing a verification step. To change or add security info when access to the existing recovery email is lost, the only supported path is to replace the security info through the “I don't have any of these” flow, which then places the account in a temporary restricted state.

Since the account password is known but access to the current security info is lost, follow these steps:

Start from a sign-in that triggers identity verification (for example, when accessing security settings).
At the Verify your identity prompt, when asked to use the existing phone/email, select I don't have any of these.
Follow the prompts to replace the security info with a new email or phone that is accessible.
After submitting the new security info, the account will enter a 30‑day protection period where some sensitive actions are restricted.
- During this 30‑day period, the new security info cannot be fully used to manage security settings.
- If access to any old security info is regained and used to sign in during this period, the pending change is canceled.

If some, but not all, security info is still accessible (for example, a phone number but not the recovery email), use that working method instead:

Sign in to the Advanced security options page.
Select Add a new way to sign in or verify and add a new email or phone.
Verify the new method using the code sent to it.
Expand the outdated security info entries (lost email addresses) and select Remove, confirming when prompted.

Important constraints:

All existing security info must not be removed at once without going through the replacement flow; doing so triggers the 30‑day restriction automatically.
Support agents cannot override verification, send codes, or directly change security info for security reasons.

If none of the existing verification options are accessible and the I don't have any of these option is not visible in the current flow, sign out and start a fresh sign-in at the main Microsoft account sign-in page, then proceed until the Verify your identity screen appears and choose I don't have any of these there.

References: