A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
At the Microsoft account verification screen, select I don’t have any of these, replace the inaccessible security information with an email or number you can use, and complete the required 30-day security hold.
Recover access
- Start signing in to the Microsoft account used for Xbox.
- At Verify your identity, first look for Use a different verification method, Show more verification methods, or I can’t use my app right now.
- If an accessible email, recovery code, or other method appears, use it.
- If the old number and unavailable Authenticator app are the only choices, select I don’t have any of these.
- Follow the prompts to provide new security information you can access.
- Verify the new email address or mobile number when prompted.
- After all security information is replaced, Microsoft requires a 30-day wait before sign-in. This hold cannot be expedited. If the old security method becomes available during that period, using it will cancel the replacement request.^1^
Avoid repeatedly requesting codes while doing this; excessive requests can trigger a temporary block.^1^
Important recovery limitation
If two-step verification was enabled and no registered verification method is accessible, the normal Microsoft account recovery form cannot bypass it. Microsoft support agents also cannot send a reset link, approve the sign-in, or manually change the account’s security details.^2^
If two-step verification was not enabled, use Microsoft’s Sign-in Helper first; the recovery-form guidance applies only through that branch.^2^
If Authenticator backup was previously enabled
On the replacement phone, install Microsoft Authenticator and use Recover accounts. This works only if an Authenticator cloud backup was created before access to the old phone was lost. Restoring the app without an existing backup will not recreate the account approval method.
After access is restored
In the Microsoft account Security tab:
- Select Manage how I sign in.
- Select Add a new way to sign in or verify.
- Add at least two accessible backup methods, such as a recovery email, Authenticator, or passkey.
- Confirm the new method before removing the obsolete phone number.^3^
Do not remove every existing method simultaneously; replacing all security information places the account into the 30-day restricted state.^4^
References