Create a Microsoft account recovery code before lockout

A Microsoft account recovery code is an emergency route when you forget a password or lose access to sign-in verification. It is not a replacement for securing your recovery email and phone. Generate it while signed in, then keep it somewhere you could reach without the same account or device.

Prepare the code​

1. Open your Microsoft account security dashboard from a bookmark or by typing Microsoft's account address. Go to the page for managing how you sign in and locate Recovery code. Choose Generate a new code.
2. Record the full 25-digit code accurately and keep it in a secure offline place. Microsoft recommends printing it and not storing it on a device used to sign in to that account. Do not paste it into chat or a support form.
3. Understand that creating a new code invalidates the previous one immediately. Destroy or clearly mark any old paper copy so you do not rely on it during an emergency.
4. Check that your recovery email, phone and other sign-in methods still work. A recovery code is a reserve, not a reason to remove strong everyday verification.

If already locked out​

Microsoft's current instructions describe entering the code through its official sign-in recovery prompts. You cannot retrieve an existing code after the fact; if you are still signed in, generate a replacement. With two-step verification enabled, some security-info changes may involve a 30-day waiting period. Microsoft support cannot simply send a reset link or change protected account details on request. Never buy a supposed instant unlock from a third party. If the incident started with an unfamiliar sign-in alert, first use our Microsoft alert checklist to distinguish a failed attempt from account access.