Microsoft account keeps getting locked: Fixes that work

A Microsoft account keeps getting locked when old sign-ins, synced devices, or a recovery-info mismatch keep triggering verification failures; start by fixing the oldest active devices and updating recovery details. If you only sign it in once, the same stale trust signal can lock you out again. This guide shows how to separate personal and work or school account issues, remove stale sessions, and reset the recovery path so the lockout stops.

What repeated lockouts mean

Repeated lockouts usually mean the account is still seeing bad sign-ins from somewhere, even after you change the password or clear the web browser on one device. The fastest first check is to identify whether this is a personal Microsoft account, a work or school account, or a local Windows sign-in problem.

Temporary lock versus blocked sign-in

A personal Microsoft account can be locked for suspicious activity or repeated failed sign-ins, and some cases may add a verification step before access returns. A work or school account can be blocked by Microsoft Entra ID policy or by an administrator-set lockout threshold. A Windows local account is a separate issue.

When the issue is the account and when it is the device

If lockouts follow you across phone, browser, and PC, the account or its recovery data is the likely source. If only one PC keeps causing prompts, cached credentials or Windows Credential Manager entries are more likely. Fix the source first, then sign in again everywhere else.

Microsoft account keeps locked table

This table maps the symptom to the place that usually needs checking first. Use it before you retry sign-in many times. That way you can stop the loop instead of feeding it.

Why is my Microsoft account locked?

Repeated locks are often linked to too many failed password attempts, two-factor verification after a device or location change, or recovery info that no longer matches the account. Microsoft support says the sign-in helper can identify many account issues by checking the email address or mobile phone number you enter. (Microsoft Support)

Too many failed password attempts

Suppose a saved password on an old laptop keeps trying the wrong value every few minutes. Even after you sign it in once, that device can trigger the next lock again. Start by stopping the bad source, not by repeating the same password attempt.

1. On each signed-in device, open the Microsoft app or browser where the account is saved.
2. Sign out of Outlook, OneDrive, Teams, and any browser profile that stores the account.
3. On Windows, open Control Panel > Credential Manager > Windows Credentials and remove Microsoft-related entries.
4. Sign in again with the current password only after the stale entry is gone.

Two-factor prompts after device or location changes

Two-factor authentication can add extra prompts when a device, browser, or location changes. That is expected. If the prompt arrives on a phone that no longer has the account or on a browser with stale cookies, the verification step can fail and the account may lock again.

1. Complete the code or approval prompt on a trusted device first.
2. Refresh the sign-in on the problem device instead of retrying the old session.
3. Check whether another phone, tablet, or browser still has the account signed in.
4. Remove old app passwords if the app still uses legacy sign-in methods.

Recovery info that no longer matches the account

If the recovery email or recovery phone number is outdated, Microsoft may not be able to send the next verification step where you expect it. That often looks like a lockout that never clears. Fix the recovery path before the next reset attempt.

1. Open the Microsoft account security info page and review recovery email and recovery phone number.
2. Replace old contact details with the current ones.
3. Use the Microsoft sign-in helper and enter the email address or mobile phone number you are trying to sign in with.
4. Follow the next instruction the tool gives you if it detects a problem.

Why do saved sign-ins keep failing?

Saved sign-ins often keep failing because old credentials are still present in browsers, apps, and Windows Credential Manager. A password change does not always clear those tokens. If one device keeps sending the wrong data, the account can lock again even after a successful sign-in elsewhere.

Cached credentials in browsers and apps

A common mistake is updating the password on the Microsoft Account page and assuming an old mail app will stop using the outdated sign-in, which can keep triggering lockouts. Outlook, OneDrive, browser profiles, and phone sync often keep the old token until you remove and re-add the account.

1. On each phone, tablet, and PC, sign out of Outlook, OneDrive, and any Microsoft browser profile.
2. Delete the account from the app, then add it again with the current password.
3. Check whether a second profile, guest session, or work profile still has the old sign-in stored.
4. Restart the device before trying again if the app still reuses the old session.

Windows Credential Manager entries

On a PC that locks repeatedly, Windows Credential Manager is a common place to check for stale Microsoft sign-in data. If those entries remain, the computer may keep sending the same failed attempt in the background.

1. Open Control Panel > Credential Manager > Windows Credentials.
2. Remove entries that reference Microsoft account, Office, OneDrive, Outlook, or the email address in question.
3. Open Settings > Accounts > Email & accounts and verify the account list.
4. Sign in again, then watch whether the lockout stops.

How do I stop my Microsoft account from getting locked again?

Stop the loop by cleaning every device that still holds the old sign-in, then reset the recovery path if needed. A password reset may be required after sign-in, but it is a separate step from the lockout. After that, remove stale saved passwords from password managers and app sign-ins.

1. Use the Microsoft sign-in helper if you cannot access the account and enter the email address or mobile phone number you are trying to sign in with. Microsoft says the tool checks the details you provide and guides the next step.
2. If the helper points to a problem, follow that path first instead of retrying random passwords.
3. Reset the password only when the helper or security flow requires it.
4. After the reset, update the password in your password manager and in every signed-in app.
5. Remove old app passwords and stale device sign-ins.
6. Review the recovery email and recovery phone number so the next verification reaches you.

Say your phone still opens OneDrive with an old session while your laptop uses the new password. The phone becomes the bad source. Remove the account from that app, add it back, and then test the sign-in again from the browser.

Is this a work or school lockout?

If the account belongs to an organization, the problem may come from Microsoft Entra ID or a policy set by an admin. That is different from a personal Microsoft account recovery problem. In a managed environment, repeated sign-ins can be blocked by a lockout threshold, and IT may need logs to find the source.

Microsoft Entra ID and admin policy locks

Work and school accounts can be locked by policy, repeated failed sign-ins, or device-based authentication issues. The account lockout threshold is set by an admin in business environments. If this is the case, personal recovery steps will not clear the underlying source.

1. Ask IT whether the account is a personal Microsoft account or a work or school account.
2. Check audit logs or domain controller logs for the recent failed sign-ins.
3. Correlate the failures with device, app, or time of day, then fix the source account or device.
4. Have the admin clear the lockout after the source is removed.

When IT must clear the source of bad sign-ins

ManageEngine describes repeated Windows lockouts as something you investigate by correlating recent logon information, and it positions its tool as an account lockout analyzer for AD investigations. That matters when the same bad attempt comes from a managed laptop, a phone sync client, or an old service credential.

1. Review recent logon events for the user and device.
2. Check scheduled tasks, mapped drives, email clients, and mobile sync apps that may still hold the old password.
3. Update or remove the stored credential on the affected endpoint.
4. Clear the lockout only after the bad source is fixed.

Why does my Windows account keep getting locked out?

If only one Windows PC keeps causing the problem, the source is often local to that machine rather than the Microsoft account itself. That usually means cached credentials, Outlook or OneDrive tokens, or a saved credential in Windows Credential Manager. The account can look healthy everywhere else.

Check the PC first

Work through the machine that shows the repeated prompt before you change anything else. If the same PC keeps retrying the wrong sign-in, every manual sign-in will be temporary.

1. Open Credential Manager and remove Microsoft-related entries.
2. In Settings > Accounts > Access work or school, remove any account that should no longer be connected.
3. Restart the PC.
4. Sign in to the account again and confirm the prompt stops.

Do I need Microsoft support if my account keeps locking?

Use Microsoft support after the helper tool, password reset, and device cleanup do not fix the loop. Microsoft separates personal accounts from work accounts in its support flow, and it also offers support for work or school accounts. Support can guide the next step, but agents cannot send password reset links or change account details.

Best support path

Start with the sign-in helper, then use Get Help in Windows for common scenarios. Microsoft recommends Get Help in Windows, and Microsoft says troubleshooters can resolve many common scenarios. If the issue is tied to a home or business product, use the support channel that matches the account type.

1. Open Get Help in Windows if the issue is on a PC.
2. Use the Microsoft sign-in helper for account access problems.
3. Choose the support route for personal or work/school accounts.
4. If the account still fails, contact chat or phone support for the product in question.

Frequently asked questions

Why does my Microsoft account keep getting locked?

Repeated lockouts usually come from a device, app, or browser that still sends the wrong sign-in, or from recovery details that no longer match the account. Check Windows Credential Manager, signed-in apps like Outlook and OneDrive, and the security info page before you try again.

Why do I keep getting locked out of my Microsoft account?

A repeated lockout often means one saved session has not been cleared. Remove the account from old devices, browser profiles, and phone sync apps, then sign in again with the current password. If the account is work or school managed, ask IT to review logs.

How long does a Microsoft account stay locked?

The length depends on the account type and the cause. A personal account may require verification through the sign-in helper, while a work or school account may stay blocked until an admin clears policy or a lockout threshold. Do not assume one fixed timer.

Why would a Microsoft account be locked?

A Microsoft account can be locked for suspicious activity, repeated failed sign-ins, or a security challenge after a device or location change. Outdated recovery email or phone details can also block the recovery path, which makes the lockout look longer than it is.