Stop requesting more codes for at least 24 hours, because repeated requests can restart or extend the temporary verification block; then complete verification by an existing alternate method or use the account-type recovery path below. ^1^
1. Let the verification block expire
Since another code request already produced the “too many attempts” message:
- Make no further code or Authenticator setup attempts for the full 24 hours shown.
- Afterward, make one attempt.
- If still blocked, wait longer—Microsoft advises waiting as long as one week if 24 hours is insufficient.
- If available, select Sign in another way, Other ways to sign in, or I can’t use my Microsoft Authenticator app right now, and choose an already-registered email, phone, passkey, or other method.
- If the block appears tied to the current connection, switch between Wi-Fi and mobile data before that single attempt.
Microsoft documents that a high volume of requests can cause a block and that repeated attempts may reset its timer. ^1^
2. Check what the Outlook prompt actually requests
An empty Authenticator screen does not necessarily mean that a six-digit code should be present:
- “Approve sign-in,” “Check your Authenticator,” or a number displayed in Outlook: this expects a push notification and possibly number matching. Open the notification in Authenticator, select the matching number, and approve it. The phone needs an Internet connection for this method. ^2^
- “Enter code” or “Use a verification code”: this expects a rotating code from an account that was already registered in Authenticator. Authenticator must first have been added as a sign-in method for that account; merely typing the email into the app does not complete that registration. ^2^
Do not approve any Authenticator request that you did not initiate.
3. Recover verification according to the account type
Personal Microsoft account
This normally includes addresses ending in @outlook.com, @hotmail.com, @live.com, or @msn.com.
After the block clears:
- Sign in to the Microsoft account Security page.
- Select Manage how I sign in.
- Select Add a new way to sign in or verify.
- Add Microsoft Authenticator, a recovery email, or another offered method.
- Complete the confirmation sent to that method. ^3^
If the alternate address is another Microsoft email account, keep the original verification page open and access the alternate mailbox in a separate InPrivate/private browser window. This avoids one Microsoft-account sign-in replacing the other browser session. ^1^
If none of the registered security methods is accessible, choose I don’t have any of these during identity verification and follow the account-recovery process. Replacing all security information can impose a 30-day wait, so do not remove every working method merely to troubleshoot this issue. ^1^
Work or school Microsoft 365 account
After the block clears, use Sign in another way if another method is already registered. If no method works, contact the organization’s IT administrator and request an MFA/authentication-method reset so Authenticator can be registered again. Organizations can restrict self-service recovery, and Microsoft’s work/school guidance directs users to their administrator when recovery is unavailable. ^4^
4. Add the account to New Outlook
Once browser sign-in and verification work:
- Open New Outlook.
- Select View → View settings, or File → Account info.
- Open Accounts → Your accounts.
- Under Email accounts, select Add Account.
- Enter the address, select Continue, complete the sign-in prompt, and select Done. ^5^
Reinstalling Outlook or repeatedly adding the account will not bypass an account-level verification block; restore a working verification method first.
References
- Troubleshoot Microsoft verification code issues
- Sign in using Microsoft Authenticator
- Microsoft account security info & verification codes
- Troubleshoot verification code issues for work or school accounts
- Add an email account to Outlook for Windows | Microsoft Support