If you can't sign in to your personal Microsoft Account — the one that holds your Xbox library, your personal OneDrive, your Outlook.com mail, or your Microsoft Store purchases — you're not stuck. Almost every case comes down to one of five issues, and there's a clear order to try them in. Most people are signed back in within ten minutes. Here's how.
First: confirm it's actually a Microsoft Account you're trying to sign into
A personal Microsoft Account (sometimes shortened to "MSA") is your individual identity with Microsoft. The same single account works for:
- Outlook.com / Hotmail / Live mail
- Xbox Live and Microsoft Store
- Microsoft 365 Personal or Family subscriptions
- Personal OneDrive
- Signing in to Windows 11 with a personal account (not a work device)
It is completely different from a Work or School account, which is the Microsoft 365 identity your employer or school issues. If you're trying to access work email, those steps are in this guide instead. Mixing the two up is responsible for a surprising amount of "Microsoft sign-in isn't working" rage.
Fix 1: Sign in at a URL that accepts personal accounts
Microsoft has many sign-in pages, and only some of them accept personal accounts. The ones that do:
account.microsoft.com— for managing the account.login.live.com— the universal personal sign-in.outlook.live.com— for email.
And the ones that won't accept a personal account, no matter how hard you try:
outlook.office.com— work / school accounts only.portal.office.com— same. Work only.
If you've been at the wrong URL the whole time, switching is the entire fix. Try this before you do anything else.
Fix 2: Reset your password
If the password genuinely isn't working — and you've ruled out the wrong URL — reset takes about three minutes:
- Go to
account.live.com/password/reset. - Type the email address.
- Pick how to verify: SMS code to your phone, code to an alternate email, or a code from the Microsoft Authenticator app.
- Enter the code.
- Set a new password. A 14-character passphrase ("BlueOctoberWaffles") is easier to remember and stronger than a complex 9-character mess.
Store the new password in a password manager (Bitwarden, 1Password, or even your browser's built-in one). That way you're never typing it from memory again, and you're never back here for the same reason.
Fix 3: Get past the two-step verification prompt
If you've turned on two-step verification at any point — and Microsoft strongly recommends you have — your sign-in needs both the password and a second factor. The common stumbling blocks:
- You changed phone numbers. The SMS code is going to your old number. Click "I don't have access to this" on the verify screen and choose another verification method.
- The Authenticator app shows a code but it gets rejected. Your phone's clock is drifting. Open Microsoft Authenticator → tap your account → "Time correction for codes" → Sync now. The next code works.
- You don't remember turning on two-step. Microsoft enables it automatically after suspicious sign-in activity. Follow the prompts to verify a different way, then disable it later if you want (though I'd recommend leaving it on).
- The SMS code isn't arriving. US carrier short-code throttling. Wait 60 seconds, try again, or pick a different verification method.
Fix 4: The incognito-window test
Browser cookies cache sign-in state, and when that cache goes bad, sign-in can get stuck in a loop where it seems to succeed but you're never actually signed in. Test in 30 seconds:
- Open a new private / incognito window in your browser.
- Go to
login.live.com. - Sign in.
If it works in incognito but fails in your normal browser, clear cookies for these three sites in your regular browser:
- login.live.com
- account.microsoft.com
- account.live.com
Close the browser fully, reopen, sign in fresh. The incognito test is the single most useful diagnostic for any web-based sign-in problem — it isolates browser state from everything else.
Fix 5: Unlock an account paused for unusual activity
Microsoft locks accounts when it sees unusual sign-in patterns — a new state, a new country, a new device after a long absence, or a password attempt from somewhere it doesn't recognize. The signs:
- A "Help us protect your account" message before you can continue.
- An email or SMS asking you to confirm a recent sign-in attempt.
- Sign-in completes but the account is in read-only mode until you verify.
To unlock:
- Follow the on-screen prompts. Microsoft asks for a verification code to your recovery phone or email.
- Enter the code.
- The lock lifts within minutes.
If none of your listed recovery methods work, you'll need the long-form recovery in the next section.
If nothing works: the formal recovery form
When you've lost your phone, your alternate email, your authenticator app, and the standard reset and unlock paths all fail — Microsoft has a formal recovery process where a human reviews the case.
- Go to
account.live.com/acsr. - Fill in everything you can remember: account email, an email Microsoft can use to reply (must be different), past passwords, recent email subjects, payment methods you've used on Microsoft Store, Xbox gamertags, names of friends or family in your contacts.
- Submit. Microsoft reviews within 24 hours and emails you the outcome.
The form prioritizes detail. The more identifying information you supply (and the more accurate it is), the higher your chance of being approved. Don't skim — fill it out carefully the first time.
Lock the account down so this doesn't happen again
Five minutes of setup today is enormously cheaper than a 24-hour recovery wait later. Go to account.microsoft.com → Security and:
- Add a current phone number. Not the one you ported away from in 2022.
- Add an alternate email — preferably not another Outlook/Hotmail address. Use a Gmail, a work email, anything outside Microsoft.
- Install the Microsoft Authenticator app on your phone. It works without SMS and survives all the SMS-related failure modes.
- Sign in to the account at least every six months. Microsoft can close accounts that go totally inactive — usually after two years, but newer policy is tightening. Just opening Outlook.com counts.
Quick reference: which fix for which symptom
- "Incorrect password" → Fix 2 (reset password).
- "We need to verify it's you" → Fix 3 (MFA / second factor).
- Sign-in loops with no error → Fix 4 (incognito test).
- "Help us protect your account" → Fix 5 (unlock).
- "That account doesn't exist" → Fix 1 (wrong URL) or the account is closed for inactivity.
Match the symptom, run the matching fix. Most people are back in within fifteen minutes. The single most important detail is reading the exact error wording — that one phrase tells you which fix to try, and skipping it is the reason most people end up randomly guessing for an hour.
Take a screenshot of any error you see, then walk down the list. The answer is in there.