Account lockouts protect against brute-force attacks but lock you out at inconvenient times. Quick fixes:

1. Wait it out

Most lockout policies auto-unlock after 15-30 minutes. If you're not in a rush, wait.

2. Self-service unlock (if available)

If your org has Azure AD with SSPR:

  1. Go to passwordreset.microsoftonline.com
  2. Enter your account email
  3. Choose I want to unlock my account
  4. Verify identity (text, call, app)
  5. You're unlocked

3. Why did this happen?

Common causes:

  • You typed wrong password too many times
  • Someone is trying to brute-force your account (security concern!)
  • A saved password (Outlook, Wi-Fi) is wrong and keeps retrying

Check Outlook hasn't been pounding the server with a stale password. Same with mobile email apps and Wi-Fi connection profiles.

4. Check what's using your credentials

If you keep getting locked out:

  • Old Outlook profile on a former laptop still trying to connect
  • Mobile device with cached credentials
  • Wi-Fi configured for WPA2-Enterprise with your username — fails on password change
  • Saved password in browser, mobile app, etc.

Clean these up — remove from all devices, then sign in fresh.

5. Mobile device

Phones especially:

  • Outlook mobile may be using old credentials
  • Wi-Fi WPA2-Enterprise needs password update if your account password changes
  • Some apps cache credentials forever; remove and re-add

6. Suspicious sign-in attempts

If you're being locked out and don't know why:

Failures from unknown IPs are someone trying to break in. Change password and enable stronger MFA.

7. Account compromise

If you see successful sign-ins from places you weren't:

  • Your account is compromised
  • Change password immediately
  • Report to IT
  • Check sent items / rules for malicious activity

8. Lockouts after password change

If you change password and get locked out within minutes:

  • Old saved password somewhere is still trying
  • Most common: mobile email apps, smart TV email setup, retired laptop

Hunt them down or have IT identify the offending device via sign-in logs.

9. Specific app lockout

Some apps have their own lockout independent of corporate:

  • Salesforce — wait it out or have admin unlock
  • Slack — usually doesn't lock; check for IP restriction
  • Bank or financial — call them

Each app's policy differs.

10. Hardware key option

If you keep getting locked out due to password issues, hardware keys can replace password entirely (passwordless sign-in):

  • Available in Microsoft 365 with certain configurations
  • Talk to IT about enabling Windows Hello for Business or passwordless sign-in

When to ticket

Raise a ticket if:

  • You can't unlock via SSPR
  • You're being repeatedly locked out and don't know why
  • You see suspicious sign-in activity
  • A specific application is locking you out and you can't reach its admin

Include the application name, when you noticed lockouts, and any error messages.