“too many authentication attempts” error for over a month

The “too many authentication attempts” or “try another verification method” block is a security lock that cannot be bypassed or overridden manually, and app passwords cannot be created without successfully signing in first.

To address the long‑running block and regain access:

1. Stop all further sign‑in attempts for a while
   • Repeated attempts extend the lockout. Guidance is to wait at least 24 hours without trying again; if it still fails, wait longer, up to about a week, before retrying.
   • During this time, do not keep retrying codes, password resets, or recovery forms, as this can reset the cooldown.
2. When retrying, change how and where sign‑in is done
   • Use the official sign‑in page and, if offered, choose a different verification method (alternate email, SMS, or Microsoft Authenticator) instead of the one that has been blocked.
   • Try from a different network (switch between Wi‑Fi and mobile data, or use another trusted network) because high‑volume or suspicious traffic from a location can cause or prolong blocks.
   • Use a familiar device and location that has been used successfully with the account before when filling in any recovery or sign‑in helper flows.
3. Use the automated recovery tools
   • For a personal Microsoft account where the password no longer works or verification is blocked, use the Sign‑in Helper tool and, if needed, the account recovery form from a familiar device. Provide as much accurate historical information as possible (old passwords, contacts, recent subject lines, etc.).
   • If verification codes are not arriving or the system keeps saying to try another method, follow the steps in the verification‑code troubleshooting guidance: try another verification method, another network, wait out the block, then use the sign‑in helper again.
4. If this is a work or school account with Microsoft Entra multifactor authentication
   • An admin must investigate sign‑in logs and, if necessary, reset MFA registration for the user. If the account is an admin account and there is no other admin, the tenant’s administrator must work with Microsoft support (Data Protection team) via the official support channels to regain access.
5. App passwords specifically
   • App passwords are only available after a successful, fully authenticated sign‑in. There is no supported way to generate a new app password without logging in and completing MFA.

If the lockout persists even after waiting and following the above steps, the only remaining options are to continue using the automated recovery tools after each cooldown period and, for work/school tenants, to escalate through the organization’s IT admin and Microsoft’s support channels. If recovery ultimately fails for a consumer account, the associated gamertag and services tied to that identity cannot be moved or recovered separately.

References:

• Troubleshoot Microsoft verification code issues
• Common problems with two-step verification for a work or school account
• I can't sign in to my Microsoft account
• My username and password have stopped working
• Frequently asked questions about Microsoft Entra multifactor authentication
• Troubleshoot problems with Microsoft Authenticator