Microsoft 365 features that help users manage their subscriptions, account settings, and billing information.
Skipping the 30‑day security waiting period is not possible. When all existing security info (like phone and email) is removed and replaced, the Microsoft account is put into a restricted state for 30 days before the new info takes effect. This applies even if the account is compromised.
During this 30‑day period:
- The account can still sign in to most Microsoft services (Outlook.com, Xbox, Skype, OneDrive, etc.), but
- Changes that require a security code (like updating password, parental controls, or account aliases) are blocked until the 30 days are over, unless the pending change can be canceled using the built‑in options.
Actions to take now:
- Check if the account is in “security info change pending” state
- When signing in or managing security, if the message “Your security info change is still pending” or “You can’t access this site right now” appears, the 30‑day restriction is active.
- Use the options on the pending screen (if available)
On that same “security info change is still pending” page, look for one of these links:
- Cancel this request – Use this only if the security‑info change was started by the legitimate owner and there is still access to the old security info. Canceling can restore the previous security info and may allow normal security actions again.
- Let us know – Use this if the change was not made by the legitimate owner. This routes through the “unauthorized change” flow from that pending window.
- Understand what can and cannot be done during the 30 days
While the 30‑day period is active and 2‑factor verification was not previously enabled:
- You can:
- Sign in and access most Microsoft services (Outlook.com, Xbox, Skype, OneDrive, etc.)
- View order history
- Make purchases from the Microsoft Store
- Manage subscriptions
- Update billing or mailing address
- You cannot:
- Change the password
- Access parental controls
- Update account aliases
- Access OneDrive Personal Vault If 2‑factor verification was turned on, access to the items above is also blocked; the only options are to wait 30 days or cancel the request (if possible).
- You can:
- After regaining full control
Once the 30‑day period ends or the pending change is successfully canceled and security settings are accessible again:
- Change the password immediately.
- Remove any unrecognized aliases or security info.
- Add multiple security options (email, phone, authenticator app) so that losing one method does not force another 30‑day lock.
- Avoid changing all security info at once to prevent triggering another 30‑day restriction.
These behaviors and limits are built into Microsoft’s automated security system and cannot be overridden or skipped, even by support.
References: