How to Change Microsoft Account Security Info Without the Old Email
Question details
The user needs to update their Microsoft account security information but is blocked because verification codes are being sent to an old, inaccessible recovery email address.

- Product
- Microsoft Account
- Device & OS
- not provided
- Scenario
- Attempting to change account security settings or recovery methods without having access to the original verification email address.
- Observed behavior
- Microsoft defaults to sending a verification code to the inactive old email address, preventing immediate removal of the outdated email and triggering a 30-day waiting period when new methods are added.
Ensure you have an active, accessible phone number or an entirely new email address ready to be registered as your replacement security verification method.
Replace Security Info and Complete the 30-Day Waiting Period
Add a new phone number or email address to regain control, which will trigger a mandatory Microsoft security hold before the old email is removed.
When you no longer have access to your old recovery email, Microsoft requires you to manually mark your security info as lost. Replacing all existing security information triggers an automated 30-day pending period. This is a strict safeguard to protect your account from unauthorized changes by malicious actors.
Go to the Microsoft Account Security page and sign in with your current email and password.
When prompted to verify your identity with a code sent to the old email, click on the option that says 'I don't have any of these' or 'I can't verify my account'.
Follow the on-screen prompts to enter a new, accessible phone number or an alternate email address. You will need to verify this new method immediately by entering a code sent to it.
Once the new method is approved, Microsoft will start a 30-day countdown. After 30 days, your old, inaccessible email will be automatically removed and replaced with your newly added security method.

Use the Microsoft Account Recovery Form
If you are completely locked out of the account and cannot even sign in with your password, you must use the official account recovery form.
Try WPS Office for a Hassle-Free Document Experience
Dealing with locked accounts and mandatory 30-day security holds can be frustrating when you just need to get your work done. WPS Office is a powerful, free, and lightweight alternative to Microsoft Office that allows you to view, edit, and create documents locally without requiring a complex cloud account setup.
- 1. Visit the official website: Navigate to the WPS Office official website to access the free download.
- 2. Download the software: Click the download button to get the lightweight installation file for your specific operating system.
- 3. Install and start working: Run the installer. Once completed, you can instantly open and edit your Office files without being forced to sign into a cloud account.

Frequently Asked Questions
Can I bypass the 30-day Microsoft security wait period?
No, the 30-day waiting period is an automated security measure designed by Microsoft to protect your account from hackers. It cannot be expedited or bypassed, even by Microsoft customer support.
What is the difference between a security email and an account alias?
A security email is used strictly to receive verification codes and can be linked to multiple Microsoft accounts. An alias is an alternate login name for your Microsoft account and can only be associated with one specific account at a time.
Why does Microsoft say my email is already taken when I try to add it?
This error usually occurs if you are mistakenly trying to add the email address as a new account alias rather than a security verification method. Ensure you are navigating to the 'Advanced Security Options' section to add it strictly as a contact method.
Will I lose access to my emails during the 30-day pending period?
No, you will not lose access. You can continue to use your Microsoft account to check your Outlook emails, play games, and use Office applications. The restriction only applies to sensitive account and security settings.




