Locked Out of Your Outlook or Microsoft Account: Recovery Steps
Official Microsoft page for this problem: account.live.com — we link it because the official flow is always the real path; this guide exists to help you get through it.
Being locked out of an Outlook.com or Microsoft account is stressful, especially when that address is your login for other services. The good news: in most lockout situations your data is intact and recoverable, because a lock or a forgotten password does not delete anything. The honest caveat: if you cannot pass any of Microsoft’s verification methods and the recovery form fails repeatedly, there is no human override — Microsoft support cannot manually unlock a consumer account.
Before you start
Gather what you can before touching any recovery flow. Preparation meaningfully improves your odds, especially if you end up on the recovery form.
- Any phone numbers or alternate email addresses you may have added to the account as security info.
- A device you have previously used to sign in to this account (your usual laptop or phone), on your usual home or work network. Microsoft’s systems weigh familiarity heavily.
- Details about the account: email addresses you have written to recently, subject lines of recent emails, folder names you created, and Skype contacts if the account was linked to Skype.
- Billing details if you ever bought anything with the account: Xbox or Microsoft 365 purchase dates, and the card used.
- Any old passwords you remember using on this account, even outdated ones.
Step 1: Figure out which kind of “locked out” you have
There are three distinct situations, and each has a different fix:
- You forgot the password — sign-in simply rejects your password. Go to Step 2.
- Microsoft locked the account for suspicious activity — you sign in successfully but see a message that the account is locked, usually with a prompt to verify with a phone number. Go to Step 4.
- The account says it doesn’t exist or was closed — see Step 5 and “If nothing works.”
Step 2: Reset your password
Go to account.live.com/password/reset and enter your email address. Microsoft will offer to send a security code to whatever verification methods are on file — a partially masked phone number or alternate email, or an Authenticator prompt.
If you recognize one of the masked options and still control it, request the code, enter it, and set a new password. That’s usually the whole process. Do this from a familiar device and network if possible.
If none of the offered options work — old phone number, dead alternate email — choose the option indicating you don’t have access to any of these. Microsoft will route you to the account recovery form.
Step 3: Use the account recovery form (ACSR) properly
The recovery form at account.live.com/acsr is an automated process: you supply information about the account, and Microsoft’s system decides whether the total evidence proves ownership. There is no human you can argue with, so how you fill it in matters.
To maximize your chances:
- Submit from a familiar device and location. A browser and IP address the account has seen before is itself evidence.
- Fill in as much as possible, even imperfectly. Approximate dates (“around March 2023”) beat blank fields. Old passwords count even if outdated.
- Prioritize email details. Recent subject lines and addresses you have emailed are among the strongest signals. Ask friends or colleagues what you last sent them.
- Include purchase history if you ever bought anything: Xbox games, Microsoft 365, Skype credit. Card numbers and order dates are strong evidence.
- Use a contact email you actually check — Microsoft’s verdict arrives there, usually within 24 hours.
If the first attempt fails, don’t fire off an identical resubmission. Gather more details first, then try again with a stronger submission. Microsoft may allow around two attempts per day.
Step 4: Unlock an account locked for suspicious activity
If your password works but Microsoft says the account is locked, sign in at account.live.com and follow the unlock prompts. Microsoft will ask for a phone number that can receive a text message, send a one-time code, and unlock the account once you enter it. This number is used only for the unlock and does not need to already be on the account.
After unlocking, Microsoft will typically require a password change. Do it, then review your security info and recent activity, since these locks often follow a genuine compromise attempt.
Step 5: Check whether the account was closed for inactivity
Microsoft may close consumer accounts after roughly two years of no sign-in activity (the exact policy has shifted over the years, and some account types are exempt). If the sign-in page reports that the account doesn’t exist, and it has been unused for a long time, it may have been closed and its data purged. There is no recovery path for a purged account, and in some cases the address itself can eventually be re-registered by someone else — a good reason not to keep using it as a login elsewhere.
What NOT to do
- Do not pay an “account recovery service.” Nobody outside Microsoft can unlock a Microsoft account. Paid recovery services are scams at worst and form-fillers at best — and giving them your details creates real risk.
- Do not trust calls or popups from “Microsoft support.” Microsoft does not call you about a locked account, and no legitimate agent will ask for a security code or remote access to your computer.
- Never share a verification code with anyone. Codes sent to your phone or email are for you to type into Microsoft’s page only.
- Do not spam the recovery form with thin, half-filled submissions. Each weak attempt fails on its own merits and wastes one of your limited daily tries. Slow down and strengthen each submission instead.
If nothing works
If the recovery form fails repeatedly despite your best evidence, be realistic: consumer Microsoft accounts have no manual escalation path, and the data in that mailbox is effectively out of reach. The emails and files still exist on Microsoft’s servers, but you cannot get to them without passing verification.
At that point, cut your losses methodically. Make a list of every service that uses the old address as its login or recovery email, and change each one to an address you control. Set up a new account — with Outlook.com or any provider — and immediately add two verification methods and generate a recovery code. Tell frequent contacts about the new address. Losing an account this way is painful, but it is also the moment most people finally set up recovery info properly, which makes it a one-time event.
Frequently asked questions
Why does Microsoft say my account is locked?
Microsoft locks accounts when it detects sign-in attempts or activity that looks suspicious, such as logins from unusual locations or mass-mailing behavior. Locking is protective; the account and its data are usually intact.
Do I need a phone number to unlock my Microsoft account?
If the account was locked for suspicious activity, Microsoft typically requires a one-time code sent to a phone number to unlock it. The number does not have to be one already on the account for this specific unlock step.
How long does the Microsoft account recovery form take?
Microsoft usually responds within 24 hours per submission. If your first attempt fails, you can try again — most people get up to two submissions per day.
Will my emails still be there after I regain access?
Yes, in almost all cases. A lock or a forgotten password does not delete mailbox contents. Data loss usually only happens if the account sat inactive long enough to be closed.
Can Microsoft support just unlock my account over the phone?
No. For consumer Microsoft accounts, support agents cannot bypass the automated verification systems, no matter how much proof you offer. The self-service flows are the only path.
recover.email is not affiliated with Microsoft. This guide is informational and cannot guarantee recovery.