AADSTS50053: the account is locked or the sign-in was blocked
Likely causes
- Too many attempts with a wrong password (smart lockout locks after 10 failures by default).
- A phone, mail app or service keeps retrying an old saved password.
- An attacker is guessing the password.
- The sign-in came from an IP address Microsoft flagged as malicious.
How to fix it
- Wait. The first lockout lasts about one minute by default. Each new failure after that locks it again for longer, so stop retrying.
- Find and update any device or app still using an old password.
- If the user doesn’t know the password, have them use self-service password reset, or an admin resets it. An admin can also unlock the cloud account through a password reset without waiting.
- Admins: in the Entra admin center, go to Monitoring & health > Sign-in logs, find the 50053 failure and read the Failure reason to see which case it is.
- If the attempts come from unknown locations, treat it as an attack: confirm MFA is on for the account and review risky sign-ins.
Checked against: learn.microsoft.com, learn.microsoft.com