A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
Because two-step verification is turned on and the usual verification with phone number is failing, recovery must follow the official account‑recovery paths; the 30‑second Authenticator code alone is not enough to reset the account.
Follow these steps in order:
- Try the standard password reset flow
- Go to the Microsoft account sign-in page and select Forgotten your password? or use Reset password from here: Reset password.
- Enter the Microsoft account username (email, phone, or Skype) and select Next.
- On How would you like to get your security code?, choose any verification option that still works (email, SMS, or Authenticator if it can receive prompts).
- If a code is sent, enter it and then create a new password as described in Step 3 and Step 4 of the reset article.
- If the usual verification options don’t work
- In the reset flow, if there is no usable option to receive a code, or the options shown are wrong or broken, use the sign-in helper tool linked in the reset article:
- If no option is available or accessible: use this sign-in helper tool.
- If the verification options shown don’t belong to the account: use this sign-in helper tool.
- Follow the helper’s prompts to try to regain access.
- In the reset flow, if there is no usable option to receive a code, or the options shown are wrong or broken, use the sign-in helper tool linked in the reset article:
- If two-step verification is enabled
- When two-step verification is on, resetting the password requires two working security methods (for example, Authenticator + backup email or phone), as described in How to use two-step verification with your Microsoft account.
- If only one method is available (for example, only the 30‑second code in Authenticator and nothing else works), the normal self‑service recovery cannot complete.
- If completely locked out of all verification methods
- If none of the verification options (Authenticator prompts, SMS, email) work and the account recovery form has already failed multiple times, there is no additional self‑service method documented to bypass two‑step verification.
- In that case, the account cannot be recovered through the standard tools; the recovery form and helper tools are the only supported options for consumer Microsoft accounts.
For future protection once access is restored (or for any new account):
- Add at least two different security methods (phone, alternate email, Authenticator) in the Microsoft account security settings.
- Consider generating and safely storing a Microsoft account recovery code, which can be used if all other methods are lost, as described in How to get a Microsoft account recovery code.
References: