PC Error Codes Look up a code
One safety rule: if a message shows a phone number to call, it is a scam: Microsoft never does that. Check any warning in 5 questions.

Home › Locked Out and Account Recovery › 'Too Many Requests' on Your Microsoft Account: Stop and Wait, Correctly

'Too Many Requests' on Your Microsoft Account: Stop and Wait, Correctly

By Editorial Team · · 8 min read

Too Many Requests

“Too many requests”

A temporary limit

In plain English: ‘Too many requests’ means Microsoft has paused sign-in and recovery attempts for your account after too many tries in a short time. It is a temporary limit, not a sign the account is gone.

First safe step: The fix is a full stop, a proper wait measured from your last attempt, and then one careful attempt on a familiar device.

'Too many requests' means Microsoft has paused sign-in and recovery attempts for your account after too many tries in a short time. It is a temporary limit, not a sign the account is gone. Retrying will not clear it. Each new try can extend the pause.

There is no instant fix, and no button or code will lift the limit early. The fix is a full stop, a proper wait measured from your last attempt, and then one careful attempt on a familiar device. This page walks through that order step by step.

If you are worried someone has taken over your account, this message alone does not prove that. It usually appears after repeated sign-ins, password resets, or verification codes. Stop for now, let the pause run out, and you will give that next attempt its best chance.

What 'too many requests' means on a Microsoft account

'Too many requests' means Microsoft has received a lot of requests linked to your account in a short time and will not accept more for now. It often follows repeated sign-in tries, password reset requests, or requests for a verification code by text, email, or app.

It is a rate limit, a set cap on how many tries are allowed in a period. The cap makes automated guessing slow and hard, because a program trying password after password runs into the same pause as a person.

That is different from other messages. A wrong password message tells you the password did not match, and a blocked account message says Microsoft has locked the account for another reason. This message alone is not proof that someone has taken over your account, and it does not mean the account is deleted or permanently blocked.

Before you close the page, note where the message appeared and the time of your last attempt. Write down the device, the browser or app, and the time as you see it on that device. Timing matters later, and that note gives you an exact starting point.

Why retrying makes the lockout last longer

Each new attempt counts as fresh activity, even if the last one failed. When you sign in again, reset the password again, or ask for another code, Microsoft's system records another request on the same account. That keeps the limit active, and it can restart the cooling-off period from that latest attempt.

Changing how you try does not get around it. A different browser, a private browsing window, another device or app, or a different network still points to the same Microsoft account, and the limit is tied to that account. The new route may look different to you, but the request still counts, and trying several routes in a short time adds up quickly.

Asking for codes over and over can make it worse in a second way. Repeated verification code requests can bring in a separate limit on codes, on top of the sign-in limit. You can then be blocked from getting a code even before you reach the sign-in step again, and one request after another does not move you closer to getting one.

Microsoft does not publish an exact timer or countdown for this limit, and the sign-in page does not show one. Any site that promises it will clear at a precise minute is guessing. The only safe measure is time with no attempts at all, counted from your last try.

How long to wait and what to do while you wait

Wait at least 24 hours from your last attempt. If you tried again at 9:40 p.m., count the 24 hours from 9:40 p.m., not from when you first saw the message. That means no sign-ins, no password resets, and no new code requests. Close the sign-in tabs in your browser and close apps that ask you to sign in.

Tell anyone else who uses this account to stop trying too. A family member, a second computer, or a phone trying again counts as a new attempt and can restart the wait. Pause mail and other apps that try to sign in on their own until the wait is over. If you can, turn those devices off or put the phone in airplane mode.

Write down the date and time of that last attempt so you do not have to guess later. While you wait, find the device you normally use for this account and the most recent password you remember. Do not test either one until the full wait has passed. Gathering this now keeps the next attempt calm and simple. Keep the note beside that device.

Do not do this

Do not pay anyone who says they can lift the limit for you. No one outside Microsoft can remove it, and paying will not shorten the wait. Do not create a new account as a workaround either, because your files, email, and purchases stay tied to the original account. Just wait for the time on your note.

The one clean attempt to make after the wait

When the full wait from your last attempt is over, make this try on the device and browser you normally use for this account, on your home network. Turn off a VPN if one is on. A familiar device, browser, and network give Microsoft fewer new details to question, and one calm try keeps you from starting the limit again.

Go directly to the official Microsoft sign-in page at account.microsoft.com, and type the account email address carefully, checking for a missed letter or an old address. Enter the most recent password you remember, once. Do not try older passwords, different spellings, or small changes to the password if this one does not work. Take your time before you press Enter.

If Microsoft asks for a verification code, request it once and wait for that code to arrive. Enter the latest code only, and do not request another code while you wait. If you know you have forgotten the password, skip guessing and use one full password reset flow instead, from start to finish.

If the clean attempt works, sign in and stop there for now. If it fails, or the 'too many requests' message returns, stop again rather than trying variations. That one result is useful information. If you instead see that the account is blocked, follow our blocked Microsoft account guide, and do not restart sign-in tries here.

If the message is still there after a full wait

If you waited the full 24 hours and the message is still there, a hidden retry is often the reason. A phone mail app, a tablet, OneDrive, or another PC may still be trying to sign in with an old password, and each try counts.

Pause mail, OneDrive, and Microsoft apps on every device that uses this account, and ask anyone else who uses it to leave it alone. Then wait a further full 24 hours with everything quiet, and repeat the one clean attempt above, with no new variations.

Before that attempt, check the Microsoft service status page for an outage, and read the exact wording on screen. If it now says the account is blocked or locked, follow the blocked Microsoft account guide instead of waiting again.

If the message lasts for several days despite quiet devices, contact Microsoft only through its official support site. Support cannot skip the security wait, but it can confirm whether something else is wrong with the account.

How to avoid triggering it again

Once you are back in, save the password that worked. Put it in a password manager, or write it in a record kept safely at home. Then signing in takes one try, not several guesses.

Keep your two-step verification methods up to date, and save backup codes where you can find them. If the email address and phone number on the account still reach you, one code request should be enough.

If you reset your password, finish the whole reset in one sitting. Starting it, leaving it half done, and starting again sends repeated requests in a short time, the pattern that caused this message.

If family members share this account, agree that one person tries and the others wait. Attempts on different phones and computers still count together.

Frequently asked questions

Can I check quickly during the wait to see if it has cleared?

No. That check counts as a new attempt and can keep the limit active. Wait the full time from your last attempt, then try once.

Will I lose my email or files while the limit is on?

No. The limit pauses sign-in attempts. It does not delete the account, and your email, files, and purchases stay with that account.

Conclusion

If you are staring at this message, doing nothing feels like the wrong move. It is the move that works here. Every extra try tells Microsoft to keep the pause in place, so the clock only starts to help you once the tries stop.

That is hard when email, photos, and files sit behind the sign-in screen. Keep in mind what the message is and what it is not. It is a pause on attempts. It is not a notice that the account has been deleted, and it is not proof that someone else has it.