How to Fix Two-Factor Authentication Not Working on a Microsoft Account
If you need to sign in and Microsoft two-factor authentication is failing, the problem is usually tied to the authenticator app, device time, recovery options, or account security settings.
This guide explains how to fix two-factor authentication not working on a Microsoft account and why the issue happens in the first place.
Why Microsoft two-factor authentication fails
Microsoft account verification can break for several reasons, even when your password is correct.
Common triggers include a new phone, disabled notifications, expired verification codes, incorrect clock settings, or an outdated recovery method.
- The Microsoft Authenticator app is not connected properly.
- Push notifications are blocked on iPhone or Android.
- The device time is out of sync, causing codes to be rejected.
- You changed your phone number or lost access to your backup method.
- Your account security info is incomplete or outdated.
- Microsoft is flagging the sign-in as unusual and requiring extra verification.
Check the Microsoft Authenticator app first
For many users, the fastest fix is inside the Microsoft Authenticator app itself.
Open the app and confirm that your Microsoft account is still listed and active.
If the account is missing, the app may need to be reconnected or restored from a backup.
What to do in the app
- Open Microsoft Authenticator on your phone.
- Make sure the correct Microsoft account appears.
- Look for any pending approval request.
- Refresh the app and try signing in again.
- If you recently changed phones, restore from backup if available.
If the app shows the account but no prompts arrive, notifications may be blocked at the operating system level rather than in Microsoft’s service.
Make sure notifications are enabled
Push approval is one of the most common Microsoft verification methods.
If notifications are off, delayed, or restricted, you may never see the sign-in request.
On Android
- Open device Settings.
- Go to Apps and select Microsoft Authenticator.
- Confirm notifications are allowed.
- Check battery optimization and allow background activity if needed.
On iPhone
- Open Settings and tap Notifications.
- Select Microsoft Authenticator.
- Turn on Allow Notifications.
- Ensure Focus mode or Do Not Disturb is not suppressing alerts.
After changing these settings, request another sign-in attempt and wait a few seconds for the prompt to arrive.
Sync the time on your phone and computer
Microsoft verification codes are time-sensitive, so even a small clock mismatch can cause failures.
This is especially important when using one-time passcodes from an authenticator app.
Why time sync matters
Authenticator codes are generated using time-based algorithms.
If your phone clock is off by even a minute or two, Microsoft may reject the code as invalid.
How to fix it
- Set your phone to use automatic date and time.
- On Android, confirm automatic time zone is enabled.
- On iPhone, turn on Set Automatically under Date & Time.
- Restart the phone after changing the setting.
- Also check the time on the computer or browser you are using to sign in.
If you rely on a hardware token or third-party authenticator, time sync is still worth checking before moving on to account recovery steps.
Try an alternate verification method
Microsoft often offers more than one way to verify your identity.
If the main method fails, use a backup option such as SMS, email, a recovery code, or another trusted device.
- Choose Sign in another way on the Microsoft login page.
- Look for a text message code, email code, or authenticator approval option.
- Use a recovery code if you previously saved one.
- Approve the sign-in from another device already signed into your Microsoft account.
If you cannot see alternate methods, your security info may be incomplete or the account may be locked down because of a recent security change.
Update your security info in your Microsoft account
Security info is the set of phone numbers, email addresses, and app methods Microsoft uses to verify your identity.
If it is outdated, you may get stuck during sign-in even if the password is correct.
What to review
- Current phone number
- Backup email address
- Microsoft Authenticator pairing
- Recovery code availability
Once you regain access, go to your Microsoft account security settings and confirm that every method is current.
Remove old numbers and add a reliable backup method so the same issue does not happen again.
Re-register Microsoft Authenticator if the account is broken
If the app is installed but Microsoft still refuses the verification, the connection between the account and the authenticator may be corrupted.
Re-registering often fixes this.
Best practice before making changes
- Do not uninstall the app until you know another verification method works.
- Keep access to your recovery email or phone number.
- Check whether the app has a cloud backup available.
After you regain access, remove the old Authenticator entry and set it up again from the Microsoft security page.
This creates a fresh link between your device and your Microsoft account.
Clear browser and session problems
Sometimes the issue is not the authenticator at all.
A corrupted browser session, blocked cookies, or an outdated cached page can stop the Microsoft sign-in flow from completing.
Steps that help
- Try a private or incognito window.
- Clear cookies for Microsoft login pages.
- Disable browser extensions temporarily.
- Update the browser to the latest version.
- Try a different browser such as Edge, Chrome, or Firefox.
This is especially useful if the verification prompt appears but the page never advances after approval.
Recover access if you lost your phone
If your old device is gone, broken, or reset, you will need Microsoft’s account recovery flow.
This process can take time because Microsoft is verifying that you are the legitimate owner.
What usually helps most
- Fill out the recovery form with accurate past account details.
- Use a familiar device and location if possible.
- Provide previous passwords, email contacts, and billing information if requested.
- Check your alternate email for Microsoft’s response.
After recovery, immediately add a new authenticator method and save backup codes where you can access them later.
Check for Microsoft service issues
Occasionally the problem is on Microsoft’s side.
Temporary service outages or authentication delays can prevent codes, prompts, or account recovery emails from arriving on time.
- Check the Microsoft service status page.
- Try again after a short wait.
- Test sign-in from another device or network.
If many users are reporting the same issue, the best fix may simply be waiting for the service to stabilize.
Prevent the problem from coming back
Once you can sign in again, strengthen your Microsoft account setup so future verification is easier.
A reliable recovery plan reduces the chance of lockouts and sign-in delays.
- Keep at least two verification methods active.
- Store recovery codes securely offline.
- Use automatic time settings on all devices.
- Review security info every few months.
- Keep Microsoft Authenticator updated.
- Make sure your backup email is accessible.
For business users, Microsoft 365 administrators should also confirm that conditional access policies, MFA registration requirements, and device compliance rules are not blocking normal sign-in.
When to contact Microsoft support
If you have tried alternate methods, verified the app, checked time settings, and reviewed security info without success, Microsoft support may need to help restore access.
Be ready to confirm ownership details and explain which verification methods failed.
The most effective way to troubleshoot two-factor authentication issues is to start with the authenticator app, then move through notifications, time sync, security info, and recovery options in order.
That approach solves the majority of Microsoft account login failures without unnecessary guesswork.