Get the Microsoft 2FA code from the seller's webmail — full guide

On the first sign-in to a fresh Microsoft account on a new Xbox console, the system almost always asks for a 6-digit verification code. That code is sent to the email tied to the account — and the address of that email is also in the package you got at purchase.

A typical seller bundle:

Xbox/Microsoft login: [email protected]
Microsoft password: XxxXxx99
Email password: xxxxx
Webmail: http://example.cn

Note: the Microsoft password and the email password are different. Don't mix them up.

Step 1. Open the webmail in a browser

1. Type the webmail address from the package (e.g. http://example.cn) into a browser on your phone or laptop.
2. Don't close the Xbox window — the code prompt has to stay open there.
3. If the site won't open — try a different browser (Chrome, Safari) or a VPN: some of these webmails are hosted in Asia and occasionally get blocked by certain ISPs.

Step 2. Log in to the webmail

1. Username / login field — type the seller's email in full (the one in the "Xbox/Microsoft login" line).
2. Password field — the email password (the second password in the bundle, usually shorter).
3. Click Log in.

If it errors out — check whether the site wants only the part before @, not the full email. Different webmails have different formats.

Step 3. Find the Microsoft message

Inside the inbox:

1. Open Inbox.
2. Find a recent message from:
   • Sender: [email protected]
   • Subject: "Microsoft account security code".
3. Open it — a 6-digit code is shown in large type, e.g. 194 472.

If there's no message — refresh after 10–20 seconds. Microsoft sometimes delays delivery.

Step 4. Type the code on Xbox

1. Go back to the Xbox console.
2. Enter the 6 digits.
3. Press Submit.
4. Microsoft offers «Add as trusted device» — choose Yes so the next sign-in skips the code.

When the code doesn't arrive

Problem	Fix
No email after 1 min	Resend code on Xbox, refresh inbox
Webmail site won't open	Turn on VPN, change DNS to 1.1.1.1
«Wrong password» on webmail	Recheck — that's the email password, not Microsoft's
Wants "security info" instead of a code	Account was tampered with — contact seller or reseller

Safety: a note on suspicious-looking URLs

Many webmails used for account-shares are hosted on .cn, .tk, .xyz domains. That's normal for the industry, but never type into those sites:

• Your own Microsoft password.
• Card details.
• Codes from other services.

Use the seller's webmail only to get the code for the purchased account, and close the tab when done.

Marix tip

All Xbox accounts from Marix arrive with a working webmail and a step-by-step instruction. If the code doesn't arrive — 24/7 support will swap the package or offer an alternative sign-in route.