When changing the phone number on a Microsoft Account during a password reset, users often encounter verification loops or immediate lockouts if the new number is not properly verified before the old one is removed. This issue typically stems from security protocols requiring two-factor authentication via the existing contact method. The most reliable solution involves accessing the account security settings directly through a web browser to add and verify the new number while retaining access to the old one temporarily.
Understanding the Security Verification Loop
Microsoft accounts are designed with strict security layers to prevent unauthorized access. When you attempt to change critical recovery information like a phone number, the system requires proof of identity. If you have already initiated a password reset or are in the process of doing so, the system may demand a code sent to the currently registered phone number. If that device is no longer available, such as when moving houses and leaving an old SIM card behind, you hit a deadlock.
The core problem is not that the system refuses to update the number, but rather that it cannot verify your ownership of the account without the previous contact method. Many users mistakenly believe they can simply overwrite the old number with a new one instantly. In reality, Microsoft often requires you to add the new number first, verify it with a code sent to that new number, and only then remove the old one. Skipping this intermediate verification step causes the error.
The Role of Two-Factor Authentication
Two-factor authentication (2FA) plays a significant role here. If 2FA is enabled, every major account change triggers a secondary check. Changing the phone number itself is considered a high-risk action because it alters how future recovery codes are delivered. Therefore, the platform ensures that the person making the change has access to the new channel. This prevents attackers who might have gained partial access from immediately locking the owner out by swapping the recovery number.
Step-by-Step Solution: Updating the Phone Number Correctly
To resolve this issue, you must follow a specific sequence that prioritizes adding the new contact method before removing the old one. Do not attempt to delete the old number until the new one is active and verified.
- Access Account Settings: Navigate to the official Microsoft account website using a trusted browser. Log in with your current credentials. If you cannot log in due to a forgotten password, use the "Forgot Password" option but pause once you reach the verification screen. Instead of trying to receive a code on the old number, look for alternative options such as email verification or authenticator app codes if previously configured.
- Add the New Phone Number: Once logged in, go to Security info under the main dashboard. Select Add method and choose Phone. Enter the new mobile number you wish to use. Ensure you select the correct country code. Click Add.
- Verify the New Number: Microsoft will send a verification code via SMS or voice call to the new number. Enter this code into the prompt. This step confirms that you have physical access to the new device. Without this confirmation, the number remains unverified and inactive for security purposes.
- Remove the Old Number: After the new number is verified, return to the Security info page. Locate the old phone number in the list of methods. Click on it and select Remove. Confirm the removal. This completes the transition without triggering a lockout.
If you are unable to log in at all because you do not have access to the old number or any other recovery method, you must use the account recovery form. This process involves answering security questions or providing proof of identity, which can take several days. It is crucial to ensure that your email alias is also up to date, as seen in guides for
Changing Microsoft Account Email Alias for Your Existing Outlook Email Address, since email is often the primary fallback for recovery.
Common Pitfalls and Troubleshooting
Several factors can complicate this process. First, carrier delays can cause SMS codes to arrive late. If you do not receive a code within five minutes, request a new one. Second, some virtual numbers or VoIP services are blocked by Microsoft’s anti-fraud systems. Always use a standard mobile carrier number for verification. Third, if you recently changed your password, the system might require a waiting period before allowing further changes to security info. In such cases, wait 24 hours and try again.
Another common error occurs when users try to update their number via the Windows 10 or 11 settings app. While convenient, the desktop application sometimes fails to sync correctly with the cloud-based security profile. Using the web interface is always more reliable for account-level changes. For those managing multiple devices, ensure that Office applications are linked correctly to avoid confusion between local and cloud identities, similar to steps outlined in
Unlinking Office 2023 Retail from Wrong Microsoft Account: A Step-by-Step Guide.
Preventing Future Lockouts
To avoid this situation in the future, maintain at least two recovery methods. Add a backup email address and enable the Microsoft Authenticator app, which uses push notifications rather than SMS. This reduces dependency on a single phone number. Additionally, regularly review your security info every few months to ensure all contact details are current. This proactive approach minimizes disruption during moves or number changes.
Frequently Asked Questions
Can I change my Microsoft phone number without verifying the new one?
No, you cannot remove the old number until the new one is verified. Microsoft requires proof that you control the new contact method to prevent unauthorized changes. Attempting to skip this step will result in an error message preventing the update.
What if I don't receive the SMS code on my new number?
Check your spam folder, ensure your carrier allows short-code messages, and wait a few minutes before requesting a new code. If issues persist, try selecting the "Call me" option instead of SMS, as voice calls sometimes bypass delivery delays associated with text messaging services.
Why does my account get locked after changing the number?
Account lockouts usually occur if you make too many incorrect attempts to verify identity or if suspicious activity is detected during the change process. Wait for the temporary lock to expire, which varies by severity, and then retry the verification process carefully using the correct codes.
Is it safe to use a VoIP number for Microsoft account verification?
It is generally not recommended. Microsoft frequently blocks virtual and VoIP numbers to prevent fraud and abuse. Use a traditional mobile carrier number provided by a recognized telecommunications company to ensure successful verification and long-term account stability.
How long does it take for the phone number change to reflect everywhere?
Changes made via the web portal are usually reflected globally within minutes. However, cached data on local devices like phones or tablets might take longer to sync. Restarting your devices or signing out and back in can help force an immediate update of the security information.