The sign-in flow is asking for extra security information, not just the password. This is expected when Microsoft needs to “help secure your account” or complete two-step verification.
To get back in:
- When prompted with messages like “Let’s protect your account” or “Help us secure your account,” enter an alternate email address or phone number that can currently be accessed. It does not have to be the original alternate email; any reachable email or phone is acceptable.
- Select Next, then retrieve the verification code sent to that alternate email or phone.
- Enter the code in the prompt and select Verify.
If the alternate email being requested is itself another Microsoft account that also asks for verification, use a private/incognito browser session so both accounts can be signed in at the same time:
- Open a browser in privacy/InPrivate mode (for example, Ctrl + Shift + P in Microsoft Edge).
- Sign in to the account that is asking for the verification code and leave that tab open.
- Open a new privacy/InPrivate window and sign in to the alternate email account to read the verification message and code.
- Go back to the first window and enter the code.
Passwords alone may not be accepted because the account has additional security requirements (such as two-step verification or required security info). The system must confirm identity using a code sent to an alternate email or phone before allowing access.
If no alternate email or phone can be accessed, the self-service recovery and security prompts must be completed with a new email or phone that can receive codes.
References: