A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
Because two-step verification is blocking access and normal recovery is failing, only the official automated flows can be used; support agents cannot bypass 2FA or manually reset the account.
Follow these steps in order:
- Wait out any temporary blocks
- Seeing “Try another verification method” and repeated failures can trigger temporary blocks.
- Stop trying for at least 24 hours (up to a week if needed) before retrying, to avoid resetting the lockout timer.
- When retrying, use a different network (switch between Wi‑Fi and mobile data, or a different Wi‑Fi) as suggested under common 2FA problems.
- Try another verification method
- When prompted for verification, always choose any alternative method that appears (alternate email, different phone, etc.).
- If one method is blocked, using another may succeed.
- Use the Sign-in Helper and hacked-account flow
- Start with the Sign-in Helper tool referenced in the hacked-account guidance: it will ask for the email/phone and either show self-help or offer a chance to talk to an agent: Start.
- Follow the “How to recover a hacked or compromised Microsoft account” guidance to ensure all recommended recovery and security steps are attempted.
- Submit the Microsoft account recovery form (if 2FA is not enabled)
- If two-step verification was not enabled, and the issue is that the usual verification options look wrong or unrecognized, use the account recovery form: Account recovery form.
- Complete it from a device and location previously used with the account (home/office) and provide as much accurate detail as possible (old passwords, contacts, subject lines, etc.).
- Understand the hard limit with 2FA
- If two-step verification was enabled and none of the configured 2FA methods (phone, email, authenticator, etc.) are accessible, Microsoft explicitly states that the account cannot be recovered. Support agents are not allowed to send password reset links or change security details in that situation.
- In that case, the account is effectively unrecoverable and a new Microsoft account must be created for future use.
- If the account is locked (no “Next” button)
- If the sign-in page shows no Next option and indicates the account is locked, follow the aka.ms link shown there to submit the account reinstatement form. A safety agent will review it and contact via email. Do not submit multiple requests, as that slows processing.
If the recovery form and hacked-account flow both fail and 2FA methods remain inaccessible, there is no supported way to regain access; the lockout is permanent by design to protect account contents.
References:
- Help with the Microsoft account recovery form
- Common problems with two-step verification for a work or school account
- How to recover a hacked or compromised Microsoft account
- Microsoft account has been locked
- My username and password have stopped working
- My personal hotmail account hacked by hacker with authentication app enabled. - Microsoft Q&A
- My account got hacked - Microsoft Q&A
- My account got hacked. - Microsoft Q&A
- Need help with hacked microsoft account - Microsoft Q&A
- How do I send an email to Microsoft about my account being hacked and taken over by <removed> ? - Microsoft Q&A