"You've tried too many times to sign in with incorrect account or password"

There’s is known issues with the server that is causing this error message , I’ve been fighting with Microsoft for 3 weeks to fix it but they don’t have time line of when or if it will be fixed .

There are reports all over reddit and youtube with people struggling with this error. I cannot believe this is an error at all. The fact that someone can lock users out of their account by trying to log in (either by mistake or maliciously) is unbelievable. 

I have 2FA, backup email and backup phone number - I should not be given this error at all with the amount of security protection I have on my account, just request the 2FA code if the password is correct.  

Someone at Microsoft needs to look into this asap. 

In the meantime for anyone else facing this, although this isnt a fix - TO TRY AND GET MICROSOFT TO DO SOMETHING, DO THE FOLLOWING:

Go to here: https://login.live.com/

-> Attempt to log in

-> Click Help and feedback at the bottom

-> Click Give feedback

This opens Submit feedback to ‎Microsoft‎ form

-> Click Blocked from continuing

Write in the text box that you're getting the "You've tried to sign in too many times with an incorrect account or password." error even though your password was correct. 

The more people that do this, the higher the chance Microsoft will look to fix this to stop being bugged by it

It sounds like your Microsoft account has a security lock on it. This usually happens when you try to sign in too many times or from apps or devices that are running in the background.

In addition to waiting, try logging out of all your devices, deleting and re-adding the account on your phone and mail apps, and not trying to log in again for a while. If you do, the block will keep happening.

It could certainly be a Microsoft Infrastructure problem. In which case all you can do is wait it out.

But it could also be caused by someone trying to repeatedly access your account and failing. i.e. They know your email and are trying different passwords to see if one works.

You can setup a Login Only Alias and disable Sign-In for your current email address. Then, if all the Bad Guys have is your email alias, they get "This username has been turned-off for sign in" at the very first step of the logon process and can not continue.

For detailed instructions on how to setup a Login Only Alias and disable Sign-In for your current email address, see the answer by "Hornblower409 on Feb 27, 2026" in

https://learn.microsoft.com/en-us/answers/questions/5789093/i-get-a-few-2fa-notifications-from-canada-daily-us