How to Fix Outlook Two Step Verification Not Working
When Outlook two-step verification stops working, the problem is usually tied to time sync, app passwords, Microsoft Authenticator, or account security settings.
This guide explains the most reliable fixes so you can regain access without guessing.
Why Outlook two-step verification fails
Outlook uses Microsoft account security features, and two-step verification can fail when one part of the authentication chain is out of sync.
Common causes include an incorrect device clock, a changed phone number, a disabled authenticator method, or a blocked sign-in caused by browser cookies or outdated app data.
- Incorrect date and time on your phone, PC, or tablet
- Microsoft Authenticator not receiving push notifications
- Expired or invalid verification codes
- App password issues in desktop Outlook or mail clients
- Security defaults, conditional access, or recent password changes
- Account recovery settings that are outdated
Check the basics first
Before changing account settings, verify that the device you use for authentication is working normally.
A simple mismatch in time or connectivity can make valid codes appear wrong.
Set the correct date and time
Two-step verification codes are time-sensitive.
If your phone or computer clock is off by even a small amount, Outlook may reject a code.
- Turn on automatic date and time on your phone
- Enable automatic time zone detection
- Restart the device after changing time settings
Check internet access and notifications
Microsoft Authenticator push approvals require a stable internet connection and notification permissions.
If your device is offline or notifications are disabled, you may never see the prompt.
- Confirm Wi-Fi or mobile data is active
- Allow notifications for Microsoft Authenticator
- Disable battery optimization for the authenticator app if it blocks alerts
Use a different verification method
If one method fails, Microsoft often lets you choose another.
This is the fastest way to bypass a single broken factor without resetting your account.
- Select SMS or phone call if available
- Use an alternate email address linked to your account
- Approve the sign-in from Microsoft Authenticator on another registered device
- Try a backup code if you saved one during setup
If Outlook keeps sending you to one failed method, sign in through the Microsoft account security page in a browser and review all available verification options.
What if Microsoft Authenticator is not working?
Microsoft Authenticator is one of the most common sources of two-step verification issues.
Problems can happen after a phone upgrade, app reinstall, account migration, or a broken cloud backup restore.
Reopen the app and refresh the account
Sometimes the app simply needs to reconnect to your account.
- Force close Microsoft Authenticator
- Reopen the app and wait for a fresh sign-in prompt
- Check whether the account tile is still present
Verify the account is still registered
If your phone was replaced or reset, the authenticator entry may no longer match your Microsoft account.
In that case, you must re-register the app from the account security settings.
- Sign in to your Microsoft account from a browser
- Open Advanced security options or Security info
- Remove the old authenticator entry if it is stale
- Add Microsoft Authenticator again and complete the QR setup
Update the app and operating system
Outdated versions of Microsoft Authenticator, iOS, Android, or Windows can cause push notifications and verification tokens to fail.
Install the latest updates before retrying sign-in.
Fix Outlook desktop sign-in problems
Desktop versions of Outlook, especially Microsoft Outlook for Windows, sometimes need an app password when two-step verification is enabled.
If you recently turned on 2FA, your old password may no longer work in the mail app.
Create and use an app password
For older mail clients or certain Outlook configurations, an app password may be required instead of your regular Microsoft account password.
- Sign in to your Microsoft account security settings
- Choose to create an app password if the option is available
- Copy the generated password carefully
- Paste it into Outlook instead of your normal password
Note that newer Microsoft 365 apps usually support modern authentication and should not need an app password, but older builds may still depend on one.
Clear cached credentials
Windows can store outdated login tokens that keep Outlook stuck in an authentication loop.
- Close Outlook
- Open Credential Manager in Windows
- Remove saved Microsoft and Outlook credentials
- Reopen Outlook and sign in again
Reset your security info carefully
If your old phone number, recovery email, or authenticator device is no longer available, you may need to update your security info.
Do this carefully so you do not lock yourself out further.
- Add a new phone number or email before removing the old one
- Wait for Microsoft’s required security change period if prompted
- Confirm recovery options on the Microsoft account page
Microsoft often enforces a waiting period for important security changes.
That delay is normal and helps prevent unauthorized account takeover.
Try browser-based sign-in troubleshooting
Sometimes Outlook itself is not the issue; the browser session is.
If you are signing in through Outlook on the web, cookies, extensions, or saved sessions can interrupt verification.
- Use a private or incognito window
- Clear cookies for Microsoft and Outlook domains
- Disable ad blockers or privacy extensions temporarily
- Try a different browser such as Edge, Chrome, or Firefox
When Outlook keeps asking for verification repeatedly
If Outlook asks for verification every time you open it, the app may not be saving your authentication session correctly.
This usually points to a cache, policy, or sign-in trust issue.
- Make sure “stay signed in” is enabled when offered
- Check that cookies are not being deleted automatically
- Confirm your device date, time, and time zone are correct
- Update Outlook to the latest version
- Remove and re-add the account in Outlook if needed
Check organization or school account policies
If your Outlook account is managed by Microsoft 365, Exchange Online, or Entra ID, your organization may control authentication settings.
In that case, your administrator may have disabled certain methods or required additional sign-in rules.
- Contact your IT help desk or Microsoft 365 admin
- Ask whether conditional access policies are enforced
- Confirm whether MFA methods were reset or changed centrally
- Verify whether your device must be registered or compliant
Last-resort recovery steps
If none of the usual methods work, use Microsoft’s account recovery and identity verification process.
This is the safest path when you no longer have access to the original verification device or method.
- Use the Microsoft account recovery form
- Provide recent account activity details if requested
- Answer security questions accurately if they are enabled
- Wait for Microsoft’s review and follow the recovery instructions
For accounts protected by enterprise policies, recovery may need to happen through an administrator rather than the public recovery form.
How to prevent Outlook two-step verification problems later
Once access is restored, keep your account easier to recover by maintaining more than one verification path.
That makes future sign-ins much smoother if one device fails.
- Add at least two security methods, such as an authenticator app and a phone number
- Save backup codes in a secure password manager
- Keep your recovery email current
- Update Microsoft Authenticator before changing phones
- Review security info every few months
Keeping your Microsoft account recovery options current is the most reliable way to avoid repeat sign-in failures in Outlook.