If you see “Your account is temporarily locked to prevent unauthorized use,” stop trying to sign in and use the official recovery steps for that specific account. The warning can mean a temporary lockout after failed sign-in attempts, but the message alone does not prove anyone accessed your account. How long the lock lasts—and whether you can unlock it yourself—depends on the service and whether the account is personal or managed by an organization.
What the warning means
Microsoft’s Azure AD B2C error reference lists this wording as error AADB2C90114: “Your account is temporarily locked to prevent unauthorized use. Try again later.” Microsoft’s reference establishes that the message appears in that identity platform; it does not mean every service showing it uses the same Microsoft product or lockout policy.
As an Amazon Associate I earn from qualifying purchases.
Repeated incorrect sign-in attempts can trigger a lock in some systems. For example, the Australian Department of Defence’s VERA guide says multiple incorrect attempts can temporarily block sign-ins, and Ohio University says its warning can follow too many failed attempts from the current device. A lockout is a security measure, but the warning by itself does not reveal exactly what triggered it or establish that an attacker got into the account.
Recommended Free Tools
What to do now
- Stop entering passwords for now. More attempts may extend the lock on some services. Western Kentucky University, for instance, says additional failed attempts extend its lock timer.
- Check which account is locked. Use the recovery page or sign-in help linked from the service’s official website or app. Avoid links in unsolicited messages, and never give a password or recovery code to someone who contacts you unexpectedly.
- Use the recovery route for that account type. For a personal account, follow the provider’s official password-reset or identity-verification process. A Microsoft Q&A response about an Outlook.com user describes using a security code and changing the password, but that is a reported consumer-account route—not a universal fix for other services or managed accounts.
- For a work, school, or government account, contact the organization’s IT service desk or administrator if the lock persists or returns. The administrator can explain the organization’s policy and whether it needs to verify your identity or unlock the account.
How long does the lock last?
There is no single wait time that applies to every account, including accounts that display similar wording. Published examples show how policies differ; they are not competing recommendations or estimates for your service.
#1 Best Overall
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
| Service or organization | Published lockout guidance |
|---|---|
| Australian Department of Defence VERA | Its 2025 new-starter guide suggests waiting 30–60 minutes after repeated incorrect attempts. Contact its ICT Service Desk for persistent or repeated issues. |
| Ohio University | Its OIT guidance suggests waiting 5–15 minutes before trying again after too many failed attempts from the current device. |
| Western Kentucky University | Its ITS FAQ says a one-minute lock follows ten failed attempts; each additional failed attempt extends the lock. |
These are institution-specific settings, not a universal Microsoft timer. Follow the policy published by the provider or organization that manages your account rather than repeatedly testing whether the lock has cleared.
When to contact an administrator
If this is an employer-, school-, or government-managed account, contact its administrator or help desk when the stated wait has passed but you still cannot sign in, or when the lock keeps recurring. The Australian Defence VERA guide directs persistent problems to its ICT Service Desk. In an Azure Portal context, Intel’s support guidance likewise tells users to contact company IT or Microsoft Support.
Rank #2
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
For a personal account, use the provider’s official recovery and support channels. Community discussions on Microsoft Q&A show similar reports involving Microsoft 365 business accounts and Outlook.com, but those reports and replies are examples—not authoritative rules for every account.
Does the warning mean your account was hacked?
No conclusion about unauthorized access follows from the warning alone. It can appear after failed sign-in attempts, and Microsoft’s error description tells users to try again later without identifying the triggering event. If you complete the provider’s official recovery process and notice activity you do not recognize, follow that provider’s account-security guidance and tell your organization’s administrator if it manages the account.
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Do you need to buy anything to unlock it?
No physical product is identified as a way to clear this warning. Recovery depends on the account provider’s process or, for a managed account, help from its administrator. Security tools may have separate preventive uses, but they are not a remedy for an active lockout.
Quick Recap
Rank #4
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
