Two-step verification protects a Microsoft account, but it becomes painful when the SMS code does not arrive, the Authenticator prompt never appears, or the phone with codes is gone. Start with any trusted device that is still signed in.
Does this affect you?
Use this for Microsoft accounts used with Outlook.com, Hotmail, Xbox, OneDrive, Office, Microsoft Store, or Windows when two-step verification blocks sign-in.
If you still have the phone but codes are not arriving
This covers delayed texts and missing Microsoft Authenticator prompts.
- On a device where you are still signed in, go to account.microsoft.com > Security > Advanced security options.
- Confirm the phone number, alternate email, and authenticator method listed there are current.
- If using SMS, make sure the phone has signal, is not in Airplane Mode, and can receive other texts.
- If using Microsoft Authenticator, open the app and confirm notifications are enabled.
- Set the phone’s date and time to automatic, because wrong time can break generated codes.
- On the Microsoft sign-in screen, choose I can’t use my Microsoft Authenticator app right now or a similar alternate-method link.
- Use a saved recovery code if you have one. It works once and can get you directly back in.
If the phone is gone
Use Microsoft’s recovery form when the code device is lost, stolen, wiped, or unavailable.
- On a trusted browser, go to account.live.com/acsr.
- Enter the Microsoft account email address.
- Use any backup email, alternate phone, or recovery code that still works.
- If no method works, complete the identity form with details only you are likely to know, such as recent passwords, email subject lines, contacts, Xbox details, or account history.
- Submit the request and wait for Microsoft review, which can take from 24 hours to several days.
- Once access returns, remove old verification methods and set up two-step verification again on the current device.
More control
Use more than one method
Do not rely on one phone number. Add Microsoft Authenticator plus an alternate email or second phone number under Advanced security options.
Save the recovery code
Microsoft offers a printable or saveable recovery code when two-step verification is configured. Store it somewhere outside the phone.
Move Authenticator before replacing a phone
Add and test Microsoft Authenticator on the new device before wiping or trading in the old phone. This prevents a gap during the next sign-in.
Authenticator works without cell service
Once configured, Microsoft Authenticator can generate codes locally. Set it up before travel if SMS may not work where you are going.
Sources
- Microsoft Support – How to use two-step verification with your Microsoft account (2025)
- Microsoft Support – I cannot sign in with my Microsoft account password (2025)
- Microsoft Support – Set up the Microsoft Authenticator app as your verification method (2025)