A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
An unexpected verification code or sign-in alert usually means either someone else tried to access the account or a delayed code has just arrived.
Do not use any code that was not requested. Without that code, an attacker cannot complete sign-in.
To deal with a possible hack and secure the account:
- Check for unusual or unauthorized access
- Go to the Recent activity page from a trusted device and network.
- Review sign-ins and mark anything that was not done by the legitimate owner as “This wasn’t me.”
- Treat the account as potentially compromised
- Follow the official guidance in How to recover a hacked or compromised Microsoft account. Start with the sign-in helper tool: Start.
- The tool will ask for the account email/phone and then either show self-help steps or offer a way to talk to an agent.
- Strengthen sign-in and verification
- After regaining access, update security info (phone, alternate email) and remove anything not recognized.
- Consider going passwordless using methods like Microsoft Authenticator, Windows Hello, SMS/Email codes, or security keys. See How to go passwordless with your Microsoft account.
- If verification codes keep arriving without being requested
- Ignore them and do not share them with anyone.
- This can happen if someone repeatedly types the email/phone by mistake or is trying to break in. The account remains safe as long as the codes are not used.
- If sign-in is blocked or too many attempts were made
- If messages like “Try another verification method” or lockouts appear, wait at least 24 hours without repeated attempts, then try again.
- Use a different verification method (alternate email, different network) if available.
If access to the account cannot be restored using the automated recovery and helper tools, there is no additional manual override path; support agents cannot bypass security, send codes, or change account details.
References: