Any way to recover microsoft account?

Robb

Ars Praetorian
527
Ok, this is for my mother who back in Jan found out she had brain cancer. 1 surgery and 15 radiation treatments later, she has no clue what her microsoft login password is. Unfortunately in Microsofts infinite wisdom, its now necessary to even log into her computer. I've tried recovery and the text me a code does not work because she entered her landline phone # when they asked for a phone # apparently years ago. I've tried recovering it to my email, but I never answer the questions right, one of which is provide a prior password of hers, which she has no recollection of....

Any possible ways to recover her PC at least even if not her microsoft login that I'm not aware of?
 
Last edited:

Lord Evermore

Ars Scholae Palatinae
1,490
Subscriptor++
You may need to move the drive to another computer, or use a USB bootable drive with Linux to access the filesystem. You can recover at least some of her files from the OneDrive folder under her profile, anything that was cached locally. I'm not totally familiar with how much OneDrive will cache since I refuse to use it and having things like Desktop and Documents moved to non-standard locations and not knowing what files you actually have on your computer is stupid. Most likely she wasn't using any special folders besides the usual like Desktop, Documents, Music, etc., and it's not likely she moved any other folders to OneDrive, but you can also look through the system to check for any odd applications that saved files to their own folders. Also check the Downloads folder, since that doesn't sync.

Did the recovery options involving the phone number not give the option to have it call the number and read a code aloud? I went through this a year ago and I can't remember if they stopped doing that.

I went through the same thing with my stepfather's account last year, when my mother's PC started to fail a few years after he died. He had it all set up on what was basically a throw-away account, likely not realizing how Microsoft was tying everything to it. The troubleshooting process ended up basically bricking the PC because Windows decided the BIOS update was a security problem and required the password instead of just the PIN, and we didn't have it. Luckily everything we needed in terms of files was on the computer because OneDrive wasn't syncing those main folders, but I was never able to recover the MS Office license. He also used a landline for the account, but my mother had cancelled that phone number since then anyway, and she had cancelled the Internet service that provided the email account he used for it (he'd had that account for 30 years, before ISPs stopped providing email). Since the MS account was never actually used for anything, none of the recovery questions were answerable like providing subject lines from emails. Despite her having a large booklet of accounts and passwords, none of them matched the MS account, so I just was glad the most important data was accessible.

So you can probably get at least some of her files, but some may be lost, and if she had applications like MS Office tied to the account you won't be able to get those either. Plus of course if she was using that MS account as a real email address (@outlook.com or @hotmail.com) then she'll lose all access to her email, and anything that is tied to it.

Something to consider is copying the profile folders for Chrome or Edge or Firefox and migrating them to another computer. If she had her password saved in the browser, you might be able to retrieve it there. Or maybe try other passwords that she knows or that are in the browser, if there's a chance she re-used them.
 

Lord Evermore

Ars Scholae Palatinae
1,490
Subscriptor++
Yea the only option for recovery is receive a text message. Would be great for the call and voice option which I've seen with every other recovery attempt I've done, but no Microsoft will only send a text message... So the land line automatically leaves us sol...
It's technically possible for a landline phone to send/receive text messages these days. Perhaps this would help you, if it's important enough to pay. There are other services that might be cheaper, this is just the first one I found. They don't allow receiving OTP codes during the free trial, unfortunately. (And obviously you're trusting your text communications to an additional service provider in the path.)

 

Lord Evermore

Ars Scholae Palatinae
1,490
Subscriptor++
I had to try and access a relative's PC 18 months ago.
With bitlocker enabled, it was a complete no-go without being able to log in. Nothing I tried could read the drive.
Well, it would be possible if the user had properly backed up their recovery key as either a file on another device or in an alternate cloud storage, or on paper, and not just in the Microsoft account that isn't accessible because they don't know their own password. Eventually, even with all the new-fangled passwordless options and biometrics, everything comes down to the fact that you need to have the underlying password or encryption key to your accounts available, at least one that is the "root" that gains access to all the others, because every method of access can be lost, including passwords. It needs to be a circular system, so that if one link is broken there is always a backup option. And if you're ONLY using passwords you absolutely need to have it stored somewhere.
 

Paladin

Ars Legatus Legionis
32,552
Subscriptor
Yup, use an external password manager. Use a separate backup location for keys. Use a separate email account for recovery. Set the recovery phone options to a phone number you actually use. Use a second device where you have a working login session (phone, tablet, laptop, etc.) even if it is basically a throwaway device that is only for backup access.

Putting all eggs in one basket and then tossing the basket in the back of the closet of stuff for years is always a bad idea.

Too late for that to be useful advice for the people in this thread who needed it a few months ago... but still good for anyone who hasn't thought about it before.
 

AdrianS

Ars Scholae Palatinae
1,326
Subscriptor
Well, it would be possible if the user had properly backed up their recovery key as either a file on another device or in an alternate cloud storage, or on paper, and not just in the Microsoft account that isn't accessible because they don't know their own password. Eventually, even with all the new-fangled passwordless options and biometrics, everything comes down to the fact that you need to have the underlying password or encryption key to your accounts available, at least one that is the "root" that gains access to all the others, because every method of access can be lost, including passwords. It needs to be a circular system, so that if one link is broken there is always a backup option. And if you're ONLY using passwords you absolutely need to have it stored somewhere.
While the relative in question may well have backed up passwords to the cloud, as they were deceased I couldn't ask them for their cloud account details either :(
 

Lord Evermore

Ars Scholae Palatinae
1,490
Subscriptor++
While the relative in question may well have backed up passwords to the cloud, as they were deceased I couldn't ask them for their cloud account details either :(
One feature that I liked to see when I was helping my mom with her iPhone and iCloud account - allowing someone ELSE to be a recovery option. It might slightly reduce security, since you could have a situation with a relationship gone bad and the other person taking your device and gaining access, but it ensures there's another device that is probably going to be active and accessible, that isn't dependent on you, so even if you forget all your passwords and all your fingers get cut off and your face is melted (or you just die, which I would prefer), there's one more recovery option that will probably work, unless you were both in the same exploding vehicle, and maybe then THEY would have a different recovery person so there would be a chain of restored access. It sucks that it has to be someone else with an Apple system, though. You could imitate this to a degree with some services, by adding their email address or phone number as a recovery option IF the service allows multiples, but that's less secure since email and SMS is less secure, and the Apple feature is using their built-in 2FA, and not all services allow those multiple recover options.

Maybe one day all the providers will have some sort of intercommunications so that it will be possible to allow access to your executor to your various services and devices, or to whoever you designate, without every one of them being a different system with different capabilities, and having to provide a death certificate or power of attorney or something to each one individually, and hope that they even have a way to do it. But that will be a long way off because too many people are awful and will abuse it.