Microsoft account locked for unusual activity? How to get back in

You boot up the Xbox or open the Minecraft launcher, sign in like always, and Microsoft tells you your account is locked because of unusual activity. No warning, no idea what you did. The good news: most of these locks are temporary and you can clear them yourself in a few minutes. The catch is that Microsoft has two different kinds of lock that look almost the same, and each one has its own way out.

This guide covers both, based on what Microsoft Support says, plus what to do when the security code never shows up. It matters for gamers because one Microsoft account usually holds your Xbox profile, your Game Pass, your purchases and your Minecraft login. Lock one and you lock all of them.

Why Microsoft locks accounts for unusual activity

Microsoft says it temporarily locks an account when it notices unusual activity, to protect it against fraud or abuse. That does not mean you did anything wrong. Its support pages list the kinds of things that can trigger a block:

• Signing in from a new device, like a new console, phone or PC.
• Signing in through an app you just installed.
• Signing in from a new location, for example while travelling or on a different network.
• Activity that looks very different from your normal pattern, which Microsoft treats as possibly risky.

Of course, the lock can also be real protection. If someone else tried to sign in with your password, that is exactly the kind of unusual sign-in the system is built to stop. So once you are back in, you will check whether it was you. More on that below.

First, work out which lock you have

Read the sign-in screen carefully, because Microsoft uses it to tell you which path you are on.

• Temporary lock: the sign-in screen walks you through proving it is you, usually starting with a "Let's prove you're human" step, and offers to send a security code. This is the common one.
• Account locked by Microsoft: there is no "Let's prove you're human" option at all. Microsoft says this means the account was locked because of suspicious activity or a violation of its Terms of Use, and the lock message includes a link that starts with aka.ms.

On an Xbox console you might see a code instead of a clear message. Xbox Support says error 80A40014 can mean the account was temporarily suspended to protect you from fraud or abuse because spam or fraudulent activity was detected, and that you need to verify you own the account to unblock it. In practice that sends you to the same Microsoft account sign-in steps below, so a phone or PC browser is the easiest place to fix it.

Unlock a temporary lock with a security code

For the common lock, the fix is a security code. Do this on a phone or computer, not the console, since typing is easier and you can see the full screen.

1. Go to the Microsoft account sign-in page and sign in with the email or phone number on the account and your password.
2. Follow the instructions on the screen. When asked, pick where Microsoft should send the security code.
3. Enter the code you receive. If it came by text, type the numbers in the body of the message, not the numbers in the header.
4. Once you are in, go straight to your security settings (next section) before you jump back into a game.

Here is the part most people miss: Microsoft says the phone number you use for the unlock code does not have to be the one on your account. It does not need to be a smartphone or be online. It just needs to receive texts, so a family member's phone works. Microsoft does say VoIP numbers cannot be used for verification codes.

Request one code, wait for it, then enter it. Microsoft warns that repeated code requests can get you blocked from receiving codes at all, and those blocks can be temporary or permanent. Hammering "Send code" is the fastest way to make this worse.

When the security code does not arrive

A missing code is the most frustrating version of this. Microsoft lists a few reasons and fixes:

• Check junk or spam. Microsoft says real verification emails come from an @accountprotection.microsoft.com address.
• The lock itself can stop codes. Microsoft says that when an account is flagged for unusual activity or locked for security reasons, verification messages might not go through until the issue is resolved.
• "Usage limit exceeded" means that phone number was used too many times in a short period, or Microsoft spotted something suspicious about it. Try a different number that can get texts.
• Too many attempts can put a time lock on codes. Microsoft says waiting a day can be enough to lift it, and that repeated attempts may reset the timer.
• Sign in from a trusted device or a place you usually sign in from, if you have one. Microsoft says that can get you back in.
• If you saved an account recovery code earlier, it can help you regain access. You cannot look up or download an old one later, so it only helps if you saved it.

If none of that works, Microsoft points you to its "When you can't sign in to your Microsoft account" help, under the "I can't get a verification code" section, which has its sign-in helper tool.

If there was no "prove you're human" step

This is the other lock: Microsoft locked the account for suspicious activity or a Terms of Use violation. You cannot clear it with a security code. Here is what Microsoft says to do:

1. Select the link in the lock window that starts with aka.ms. It opens the reinstatement form.
2. Fill it in completely and honestly. A Microsoft Online Safety agent reviews it and replies by email.
3. Send it once. Microsoft says extra requests may slow the response down.
4. Watch the inbox you gave on the form, including junk mail.

Microsoft also says its agents can only send password reset links or change account details after you submit that form. So anyone who DMs you offering to unlock your Microsoft or Xbox account for a fee or for your password is not Microsoft. It is a scam, and you will lose the account for real.

Lost the phone or email on the account?

If you cannot reach any of the security info on file, Microsoft lets you choose "I don't have any of these" at the verification prompt and replace your security info. Be ready for the wait: Microsoft says that once the security info has been replaced, you must wait 30 days before you can sign in. The waiting period is there so a thief cannot swap your details and lock you out overnight.

If you forgot the password too, start with "Forgot my password" on the sign-in page. For Minecraft players stuck at that point, our Minecraft account recovery post walks through the Microsoft recovery form, and the hacked Xbox account guide covers getting a stolen Xbox profile back.

Once you are back in, check whether it was you

Do not skip this. The lock may have stopped someone with your password, and that password still works.

1. Open the Recent activity page from your Microsoft account security settings.
2. Look at anything listed under Unusual activity. If it was you, like a new console or a trip, you can confirm it.
3. If it was not you, select "This wasn't me". Microsoft then asks you to change your password and update your security info.
4. Pick a new password you have never used anywhere else. Our password generator makes one in your browser.
5. Turn on two-step verification. Our guide to Xbox two-step verification walks through the settings, including app passwords for older consoles.
6. Create a fresh account recovery code and store it somewhere that is not your phone.

Make the next lock a two minute fix

Every fix above depends on the same few details: the exact email or phone you sign in with, the password, which phone number and backup email are on the account, and that recovery code. People lose weeks to this not because the lock is hard, but because one of those details was missing on the day.

LoginScout keeps each account as one card with the login, password, recovery email, 2FA backup codes and notes together, encrypted on your device. Your Microsoft card can hold the sign-in email, the recovery code, which phone is on file, and a note that it also runs your Xbox and Minecraft. It is a gaming password manager built for exactly this.

The short version

A Microsoft account locked for unusual activity is usually temporary. If you see "Let's prove you're human", request one security code to any phone that can get texts, enter it, and you are in. No code? Check junk, try another number, wait a day, and stop resending. No "prove you're human" step means a real lock: use the aka.ms reinstatement form once and wait for the email. Then check Recent activity, change the password if it was not you, and save your recovery details. You can create a free vault for up to five accounts in about a minute.