"Invalid Security Code" error when you try to reset your admin password for Office 365, Intune, or Azure

Applies to: Microsoft IntuneAzure BackupOffice 365 User and Domain Management More


When you try to reset your password by using the self-service password reset for administrators feature in Office 365, Microsoft Intune, or Microsoft Azure, you receive the following error message: 

Invalid Security Code

This security code you entered does not match the code we sent, or it has expired. To start a new password reset request, click here.
You experience these symptoms when you do the following:
  • You click the email link that's sent to your alternative email account.
  • After you enter the security code that's sent to your mobile phone.


Try re-entering the security code again. If it continues to fail, start the self-service password reset process again and complete the process in less than 60 minutes. The process must be performed within 60 minutes of when the email message was sent. Additionally, the whole process must be performed in the same web browser session.

If you still experience the issue, close all web browsers, and then start the process again.

If the issue persists, contact your company administrator to reset your password. If you are the only administrator in your company, contact Technical Support.


This issue may occur if one of the following conditions is true:
  • The security code isn't valid. That is, the security code doesn't match what was sent through SMS text messaging.
  • You wait too long to click the Reset your password now in the email message.
  • The security code has expired.

    Note The security code and the Reset your password now link is valid only for 10 minutes.
  • You clicked Reset your password now from a different computer. Or, you opened a new web browser session, which is different from the web browser session in which you started the password reset request.
Still need help? Go to Microsoft Community or the Azure Active Directory Forums website.