Locked Out of Your Computer or Microsoft Account?

Why This Matters

On company devices, your Windows sign-in and your Microsoft 365 account are the same identity. That means:

• A password reset on one fixes both.
• A lockout on one (too many bad password attempts, expired password, blocked sign-in) locks you out of both.
• Multi-factor authentication (MFA) applies to both.

Because everything is tied together, most lockouts can be fixed with a single password or MFA fix — you rarely need to solve two separate problems.

Before You Do Anything: 3 Quick Checks

1. Check Caps Lock / Num Lock. This causes more "lockouts" than anything else.
2. Check your keyboard layout, especially on laptops or after Windows updates.
3. Wait it out. After several failed attempts, Microsoft applies a short timed lockout (usually a few minutes). Trying again immediately just resets the timer.

If none of these fix it, move to the section that matches your situation below.

Scenario 1: I Know My Password, But Windows Won't Let Me In

Cause: Usually an expired password, a sync issue between the device and the cloud account, or a stuck login screen.

Steps:

1. On the Windows login screen, select "Sign-in options" and try your PIN instead of your password (if you've set one up).
2. If you don't have a PIN, try signing in on another device (phone browser, another PC) at https://myaccount.microsoft.com to confirm your account is active and not the one that's locked.
3. Restart the machine — a pending update or a stuck domain-trust connection can temporarily block sign-in and often clears after a reboot.
4. If it still fails, this is likely a device-level issue, not a password issue — contact IT (Scenario 4).

Scenario 2: I Forgot My Password

Since your Windows and Microsoft account are linked, resetting your password fixes access to both.

Steps:

1. On the Windows login screen, click "I forgot my password" (below the password field).
2. This redirects you to Microsoft's password reset page. You'll need one of your registered recovery methods:
   • Authenticator app approval
   • Text/call to a registered phone number
   • Alternate email
3. Follow the prompts to set a new password.
4. Sign back into Windows with the new password — it will sync automatically (may take 1–2 minutes on first sign-in).

No internet access on the locked device? Do this from your phone or another computer, then return to the locked device and sign in with the new password.

Scenario 3: I Can't Get an MFA Prompt (Lost Phone, No Signal, New Device)

Steps:

1. Try a backup MFA method if you set one up (backup phone number, alternate authenticator, printed recovery codes).
2. If you have the Authenticator app on a different device signed into the same account, approve the prompt from there.
3. No backup method available? This requires IT/helpdesk-assisted identity verification — self-service won't be able to bypass MFA, by design. Go to Scenario 4.