Managing personal Outlook.com account settings, security, and privacy
For a personal Microsoft account with two-step verification enabled and no remaining verification methods, there is no bypass for the 2FA step.
What is still possible depends on the account state:
- If the password is known but all security info is lost
- Start signing in to the Microsoft account.
- At Verify your identity, select I don't have any of these.
- Follow the prompts to replace the security info.
- After replacement, there is a 30-day wait before sign-in is allowed.
- If the old security info becomes available during that period, it can still be used to sign in, but that cancels the pending security-info update.
- If some security info is still accessible
- Sign in to the Advanced security options page.
- Select Add a new way to sign in or verify.
- Confirm the new method with the code sent to it.
- Remove the lost verification method.
- Do not change all security info at once, because the account may be restricted for 30 days.
- If the password is not known
- Use the account recovery form.
- Before submitting it again, use a device and location previously used for that account if possible.
- A working email address is required for recovery updates.
- Microsoft states it reviews the answers and responds within 24 hours.
Important limitation:
- If two-step verification was turned on and none of the alternate verification methods are accessible, Microsoft support agents are not allowed to send password reset links or access and change account details.
If verification codes are being sent to another Microsoft email account, use two private/incognito browser windows so both accounts can stay signed in at the same time while retrieving the code.
If sign-in is still blocked, the remaining supported paths are:
- Sign-in helper: Sign-in helper
- Contact Microsoft Support for technical guidance: Contact Microsoft Support
References: