Outlook / Hotmail not delivering codes? Read them from the credentials

What it actually does

It exchanges the refresh_token at login.microsoftonline.com for a short-lived access token, then calls Microsoft Graph /me/messages (Mail.Read scope) to read the latest messages and pulls the 6-digit code from the subject and body. Same thing as running a script from the command line, moved into the browser.

Why this page sends data out and the others do not

The 2FA generator and credential parser are pure format math and work offline. This is inherently "go to Microsoft and read the mailbox", so it must reach Microsoft. The point is that it reaches only Microsoft, not us — not one byte of the refresh token or the mail touches an adpitstop server.

Use the credential parser to isolate the fields first · 2FA code generator

Mailbox not Outlook? Where to collect the code

The tool above only handles Outlook / Hotmail / Live (Microsoft) mailboxes. For everything else, here is where to log in — match the domain after the @ in your email and open the matching row to collect the code.

Provider not listed? Look at the domain after the @ — most private providers put webmail at the domain root or mail.<domain>. If it will not log in, the account usually needs a phone/device check first, or the password was changed by someone other than the seller — go back to the seller for that.

Outlook is not receiving my TikTok code — what now?

First check the credentials include a refresh_token and a client_id (bought TikTok accounts usually ship both). Paste them above, press "Get the code", and the tool reads the newest message in that mailbox and pulls out the 6-digit code. If you just triggered the login, wait 5–10 seconds and press again — Microsoft is sometimes a few seconds behind. This works for a code from any sender, not only TikTok.

Why does web login or IMAP fail, yet this works?

The refresh token you were given usually only carries Graph Mail.Read scope, not IMAP — and web login needs the password plus 2FA. This tool skips login entirely: it swaps the refresh token for a one-off access token and reads the mail directly, so it works where the others do not.

What three things do I paste?

The email, the refresh_token and the client_id. Paste the whole credential string into the first box and they are detected for you — the refresh_token is the long one, the client_id is the GUID shaped like xxxxxxxx-xxxx-…. Fix any misread field in the three inputs below.

Do you store my refresh token or read my mail?

No. The whole page runs in your browser; your data goes only to Microsoft (to swap the token and read mail), never through our servers, and nothing is stored. Open your browser network panel and check — the only requests are to login.microsoftonline.com and graph.microsoft.com.

It says the refresh token is invalid (invalid_grant).

A refresh token dies when someone logs in and resets it, or when it ages out unused. The tool cannot recover that — ask the seller for fresh credentials.

The newest code has not arrived.

The code was just triggered and Microsoft is sometimes a few seconds behind. Wait 5–10 seconds and press "Get the code" again. The list is newest-first, so the top row is the latest.

My mailbox is gmail / mail.ru / firstmail, not Outlook — can I use it?

This tool only handles Outlook / Hotmail / Live (Microsoft) mailboxes because it runs on Microsoft Graph. For anything else, collect the code by logging into the webmail yourself — the “where to collect the code” section above lists the login pages for gmail, mail.ru, rambler, firstmail and GMX. Match the domain after your @ and open that row.