> For the complete documentation index, see [llms.txt](https://dexcore.gitbook.io/guide/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://dexcore.gitbook.io/guide/dexcore-guide-es/modules/outlook-hotmail/features/change-security.md).

# Change Security

The Change Security function lets you manage existing security settings on your accounts — remove 2FA, change recovery emails, reset or change passwords.

***

## Which Function Do I Need?

{% hint style="info" %}
**Not sure which option to pick? Use this guide:**
{% endhint %}

| Your Situation                                  | Use This Function                                  |
| ----------------------------------------------- | -------------------------------------------------- |
| 🔑 Lost my password and need to get back in     | **Reset Password**                                 |
| 🔄 I know my password but want a new one        | **Change Password**                                |
| 📧 Need to change the recovery email            | **Change Recovery Email** (requires 2FA)           |
| 🔓 Want to remove 2FA from the account          | **Remove 2FA** (requires Recovery Email)           |
| 🔁 Want to rotate the 2FA key (keep 2FA active) | **Change 2FA** (requires 2FA key + Recovery Email) |
| 🔐 Need a new 25-digit Recovery Code            | **Change Recovery Code**                           |

{% hint style="warning" %}
All security changes require access to at least one existing security feature (2FA or Recovery Email). You cannot change security without it.
{% endhint %}

***

## Before You Start

{% hint style="warning" %}
**You need at least one of the following already set up:**

* ✅ Recovery Email connected to your IMAP — 👉 [Set Recovery Email](/guide/dexcore-guide-es/modules/outlook-hotmail/features/set-recovery-email.md)
* ✅ 2FA key in your task file — 👉 [Set 2FA](/guide/dexcore-guide-es/modules/outlook-hotmail/features/set-2fa.md)

**Without at least one of these, Change Security will NOT work.**
{% endhint %}

{% hint style="danger" %}
**Not supported:** DexCore cannot reset a password using only a **25-digit Recovery Code** (without a Recovery Email or 2FA). If you only have a 25-digit code and no other access — the bot cannot help with this account.
{% endhint %}

***

## 🔓 Remove 2FA

Removes the 2FA key from the account.

**Requires:** Recovery Email (connected to IMAP).

{% hint style="success" %}
**When to use:** You have the recovery email but the 2FA key is lost or doesn't work. Remove the old 2FA, then set up new 2FA with 👉 [Set 2FA](/guide/dexcore-guide-es/modules/outlook-hotmail/features/set-2fa.md).
{% endhint %}

***

## 📧 Change Recovery Email

Changes the current recovery email to a new one. Uses one of the [four generation types](/guide/dexcore-guide-es/modules/outlook-hotmail/features/set-recovery-email.md) (pick in Settings).

**Requires:** A valid 2FA key on the account.

{% hint style="success" %}
**When to use:** You have the 2FA key but lost access to the IMAP where the current recovery email goes. Change the recovery email to a new one using 2FA, then connect the new emails to your IMAP.
{% endhint %}

***

## 🔑 Reset Password

Recovers a lost password using the recovery email.

**Requires:** Recovery Email (connected to IMAP).

{% hint style="success" %}
**When to use:** You forgot the password. The bot will send a reset link to the recovery email and set a new password.
{% endhint %}

***

## 🔄 Change Password

Changes the current password to a new one.

**Requires:** At least one security feature — 2FA or Recovery Email.

{% hint style="success" %}
**When to use:** You know the current password but want a new, stronger one.
{% endhint %}

***

## Security Dependencies — What Needs What

| Action                    | What You Need            | Why                                                                  |
| ------------------------- | ------------------------ | -------------------------------------------------------------------- |
| **Remove 2FA**            | Recovery Email           | Outlook sends a confirmation code to the recovery email              |
| **Change Recovery Email** | 2FA key                  | Outlook asks for 2FA code to confirm the change                      |
| **Reset Password**        | Recovery Email           | Password reset link is sent to the recovery email                    |
| **Change Password**       | 2FA or Recovery Email    | Outlook requires at least one verification method                    |
| **Change 2FA**            | 2FA key + Recovery Email | Old 2FA is removed first (needs recovery email), then new 2FA is set |
| **Change Recovery Code**  | —                        | Generates a new 25-digit code; no additional access required         |

{% hint style="success" %}
**Key principle:** Recovery Email and 2FA protect each other. Having access to one lets you change the other — and then you can update the first one too.

**Example:** You have the 2FA key but lost IMAP access → Change Recovery Email (using 2FA) → Connect new recovery emails to IMAP → Now you have full access again.
{% endhint %}

***

## 🔑 Change 2FA

Removes the current 2FA key and immediately sets a new one. The new 2FA key is saved in the 2FA column of your task file.

**Requires:**

* A valid **2FA key** in the 2FA column
* A **Recovery Email** connected to IMAP (used to confirm the change)

{% hint style="success" %}
**When to use:** You want to rotate your 2FA keys for security reasons. Unlike "Remove 2FA", this keeps 2FA active on the account — it just replaces the key.
{% endhint %}

***

## 🔐 Change Recovery Code

Generates a new **25-digit Recovery Code** and saves it in the Recovery Code column of your task file.

{% hint style="success" %}
**When to use:** Your current Recovery Code was exposed or you want to refresh it as part of a security rotation.
{% endhint %}

***

## OTP Timeout — `WaitOTPCountMin`

This setting controls how long the bot waits for an OTP code during Change Security operations.

**Default: 15 minutes.**

{% hint style="info" %}
**How it works:** The bot waits the set amount of time for the OTP code to arrive. If no code comes within that time, it tries again. Each account gets **3 attempts** total. After 3 failed attempts, the bot logs **"OTP didn't come"** for that account — 👉 [Errors & Info](/guide/dexcore-guide-es/modules/outlook-hotmail/errors-and-info.md).
{% endhint %}

{% hint style="success" %}
**When to increase this value:** If your IMAP server is slow or overloaded, OTP codes may arrive late. Increase `WaitOTPCountMin` to give the bot more time to wait between retries.
{% endhint %}

***

## Common Mistakes

{% hint style="danger" %}

* ❌ Trying to change security without having 2FA or Recovery Email set up
* ❌ Using "Remove 2FA" when you don't have access to the Recovery Email
* ❌ Using "Change Recovery Email" when you don't have the 2FA key
* ❌ Forgetting to update your task file and backups after changes
  {% endhint %}