Recovering from massive Microsoft outage

Question

I also now see that I am affected by microsoft' bug which caused a mass lockout issue:

https://www.pcmag.com/news/tens-of-thousands-of-microsoft-users-hit-by-outlook-and-365-outage

It seems, due to this outage, I recently started receiving the message, "We have detected unusual activity on your Microsoft account EMAIL, or believe your credentials are at risk." It then says, "Before you can access sensitive info, you need to approve request NUMBER on your Microsoft Authenticator app." However, I've never set up the authenticator app.

I visited aka.ms/accountrecovery and I successfully reset my password using an alternate email address. However, it still gives me the error that I need to authenticate via Microsoft Authenticator which was never configured. What method do I use to recover my account without using Microsoft Authenticator?

Thanks

Answer 1

Hi @Ben Richards ,

Welcome to our forum!

I visited aka.ms/accountrecovery and I successfully reset my password using an alternate email address. However, it still gives me the error that I need to authenticate via Microsoft Authenticator which was never configured.

It is possible that you may have enabled two-factor verification by mistake due to a recent Microsoft vulnerability, or that your account may have been mistakenly marked as requiring authenticator verification.

In this case, you may try the following steps:

1. Confirm the status of two-factor verification: Log in to the Advanced Security Options of your Microsoft account and check whether two-factor verification is accidentally enabled. If it is not enabled, a system error may force the verification requirement. If it is enabled but Authenticator is not configured, you need to reset the security settings by other means.
2. Try alternative verification methods: Select "Other verification methods" when logging in, such as: Alternative email or phone number: The system may allow you to receive verification codes through other bound emails or mobile phones.
3. Use the account recovery form: If you cannot verify through existing methods: Visit the Account Recovery Form and fill in detailed information (such as past passwords, account activity records, purchase history, etc.). You need to provide as much accurate information as possible (such as old passwords, associated Skype IDs, hardware device IDs, etc.) to prove account ownership. After submission, you will receive the result via the alternative email address you provided within 24 hours.
4. Contact Microsoft Support: If the recovery form fails: Submit a ticket through the Microsoft Support page and explain the abnormal verification requirements caused by the vulnerability. Emphasize that you have never set up Authenticator and have tried password reset and backup verification methods. If the account is a work/school account, contact the organization's IT administrator to help reset the security policy.
5. Temporarily disable security verification (if possible) For personal accounts, try the following operations: Go to Security Settings and turn off two-factor verification or replace the verification method (such as SMS verification). If it does not work, the system vulnerability may limit this function, and you need to wait for Microsoft to fix it.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.