How Two-Factor Authentication Fails on a Microsoft Account
If you are trying to sign in and Microsoft Authenticator, SMS codes, or email verification is not working, the problem is usually tied to a device, app, network, or account setting.
This guide explains how to fix two factor authentication not working on Microsoft account issues with clear steps you can use right away.
Microsoft uses multi-factor authentication across Outlook, OneDrive, Xbox, Windows, and Microsoft 365, so even a small sync or configuration issue can block access faster than many users expect.
Check the Most Common Causes First
Before changing account settings, narrow down the source of the failure.
Most Microsoft account two-factor authentication problems come from one of these areas:
- The Microsoft Authenticator app is out of sync or has lost its account entry.
- SMS codes are delayed, blocked, or sent to an inactive number.
- Email verification messages are landing in spam or are delayed by your mail provider.
- The device clock is incorrect, which can break time-based codes.
- Your internet connection, VPN, or browser session is interfering with sign-in.
- You recently changed phones, SIM cards, or security information.
Verify the Time and Date on Your Device
Time-based one-time passwords depend on accurate device time.
If your phone or computer clock is off by even a few minutes, Microsoft Authenticator codes may fail.
On Windows
- Open Settings.
- Go to Time & language, then Date & time.
- Turn on Set time automatically and Set time zone automatically.
- Select Sync now if the option is available.
On iPhone or Android
- Open the device settings.
- Enable automatic date and time.
- Restart the device after changing the setting.
If you use an authenticator app, recheck the code after the device resynchronizes.
Fix Microsoft Authenticator App Problems
Microsoft Authenticator is one of the most common verification methods for Microsoft accounts, and it can fail for several reasons.
App updates, account re-registration, or a new phone can cause the link between the app and account to break.
Try these app-level fixes
- Update Microsoft Authenticator from the App Store or Google Play.
- Make sure notifications are enabled for the app.
- Open the app and confirm your Microsoft account is still listed.
- Restart the phone and try again.
- Remove and re-add the account if you still have another sign-in method available.
If you switched phones, check whether cloud backup or account transfer was completed.
Without a proper migration, the app may no longer have the correct secret or approval link for your account.
Make Sure SMS and Email Codes Are Reaching You
When Microsoft sends a code by text or email, delivery issues can look like authentication failure.
The code may be delayed, filtered, or never delivered if the contact information is outdated.
For SMS verification
- Confirm your phone number is still active.
- Check that the device has cellular signal and can receive texts.
- Turn off airplane mode and disable Wi-Fi calling conflicts if needed.
- Ask your carrier whether short-code messages are blocked.
For email verification
- Check Junk, Spam, Promotions, and Other folders.
- Search for messages from Microsoft or account-security alerts.
- Make sure your recovery email is still accessible.
- Wait a few minutes before requesting another code to avoid rate limits.
If you request too many codes too quickly, Microsoft may temporarily slow new verification messages for security reasons.
Test Sign-In in a Clean Browser Session
Browser issues can break verification prompts, especially when cookies, extensions, or cached sessions conflict with Microsoft services.
A clean session can help determine whether the problem is account-related or browser-related.
- Open a private or incognito window.
- Sign in at the Microsoft account page again.
- Disable ad blockers, script blockers, and privacy extensions temporarily.
- Clear cookies and cache for Microsoft domains if the issue persists.
- Try a different browser such as Microsoft Edge, Chrome, or Firefox.
If the prompt works in a private window, the original browser profile likely has a corrupted session or extension conflict.
Check Whether Your Security Info Is Out of Date
Microsoft account security info includes phone numbers, alternate email addresses, and authenticator app registrations.
If any of these are outdated, the account may keep sending prompts to an old device or unreachable recovery method.
What to review
- Current mobile number
- Recovery email address
- Authenticator app registration
- Trusted devices and recent sign-in activity
If you can still access the account from another device, sign in and visit the security section to review and update your information.
Keep in mind that Microsoft may require a waiting period after changing security details before new methods become active.
Use the Microsoft Account Recovery Path
If you no longer have access to your verification method, the recovery process may be the only option.
Microsoft provides an account recovery form for users who cannot complete two-factor authentication because they lost access to their phone, number, or authenticator app.
Before you start recovery
- Use a device and location you have used before, if possible.
- Gather old passwords, recent email contacts, and billing details.
- Be ready to answer questions about Xbox, Outlook, OneDrive, or Microsoft 365 activity.
Recovery success depends on how much matching account information you can provide.
The more accurate and recent the details, the better your chances of regaining access.
Review Temporary Blocks and Security Alerts
Microsoft may temporarily block sign-in attempts after suspicious activity, multiple failed codes, or unusual location changes.
In those cases, the verification method may be technically correct but still rejected.
- Stop repeated sign-in attempts for a short period.
- Check for security alert emails from Microsoft.
- Review recent sign-in activity if you can access another trusted device.
- Disable VPNs or proxy services and try from your usual network.
Frequent retries can sometimes make the lockout last longer, so pausing before the next attempt often helps.
Re-Register the Authentication Method if You Still Have Access
If you can enter the account through another verification route, re-registering the two-factor method may resolve the issue.
This is especially useful after changing phones, resetting an app, or restoring from backup.
- Remove the old authenticator entry from your security info.
- Add the authenticator app again using the setup QR code.
- Test a sign-in prompt immediately after setup.
- Save backup codes or alternate methods if available.
For business or school Microsoft 365 accounts, your organization may control the authentication policies, so you may need your administrator to reset or re-enroll the method.
When to Contact Microsoft Support or an Admin
If none of the standard fixes work, the issue may involve account enforcement, a disabled security method, or a backend synchronization problem.
Microsoft Support can help with consumer accounts, while Microsoft Entra ID or Microsoft 365 administrators handle managed accounts.
Contact support or your admin when:
- You no longer have access to any recovery method.
- The authenticator app is stuck on approval without sending a prompt.
- SMS or email verification never arrives despite correct details.
- Your work or school account enforces conditional access rules.
- Security info changes are blocked or delayed.
Have your alternate email, affected username, device type, and a description of the error ready so the support team can identify the pattern faster.