Managing personal Outlook.com account settings, security, and privacy
The fastest supported path for the circular 2FA loop between two personal Microsoft accounts is to use a different verification method or replace the security info.
- On the sign-in screen, choose a method that is known to work, or choose I don't have any of these to replace the security info.
- If the alternate email for one account is the other Microsoft account, use privacy/InPrivate mode so both accounts can stay signed in at the same time:
- Open one InPrivate window and sign in to the first account.
- When prompted for the code, leave that window open.
- Open a second InPrivate window.
- Sign in to the alternate email account there and retrieve the verification code.
- Return to the first window and enter the code.
- If the account is blocked because of unusual activity while traveling, try a different verification method if one exists, and try a different network.
- Stop repeated attempts. Excessive retries can keep the block in place.
- Wait before trying again. A day may be enough; if not, wait longer, up to a week.
- If traveling triggered the block, access may return after signing in from a trusted device or a usual location.
- Use the Microsoft sign-in helper if sign-in still fails: Start
Important details for this scenario:
- Knowing the password alone does not bypass a security block or 2FA challenge.
- If one account is verifying the other, standard browser sessions can sign one account out when opening the other; InPrivate mode is the documented workaround.
- If the account has been flagged for unusual activity or locked for security reasons, verification messages might not go through until the issue is resolved.
- If the account shows it has been locked, the supported unlock path is to sign in at https://account.microsoft.com to get a security code.
- If the lock screen does not show the Next option, use the aka.ms/ link shown in that window to submit the reinstatement request, then wait for the Microsoft Online Safety review. Do not submit additional requests, because that can slow the response.
References: