Microsoft 365 features that help users manage their subscriptions, account settings, and billing information.
First, determine whether this is a personal Microsoft account (used for Outlook.com, Xbox, etc.) or a work/school Microsoft 365 account (given by an organization). Then use the appropriate path below.
For a personal Microsoft account (Outlook.com, home Microsoft 365 subscription, etc.):
- Go to the Microsoft account sign-in page and enter the email address.
- On the Enter password screen, select Forgotten your password?.
- If that window is not open, use the Reset password flow here: Reset password.
- Follow the steps to verify identity (code by email/phone, etc.), then set a new password.
- If no verification option is available or accessible, use the sign-in helper tools linked in the article to continue recovery.
For a work or school Microsoft 365 account (given by an organization):
Option A – Self-service password reset (if enabled by the admin):
- Start at https://mysignins.microsoft.com/security-info.
- On the sign-in screen, select Can't access your account?.
- Enter the work or school email/username and complete the CAPTCHA.
- Select Next.
- If a Contact your administrator link appears instead of the reset wizard, self-service reset is not enabled.
- Choose a verification method (phone, app, etc.), complete verification, and set a new password.
Option B – If self-service reset is not enabled or does not work:
- Contact the organization’s Microsoft 365 administrator and ask them to reset the password.
- If the locked account is an admin account and no one else can reset it, follow the admin-password guidance in the referenced article (including contacting Microsoft Support if necessary).
If the account is a Microsoft 365 for business account but the username is known and only the password is forgotten:
- Use the password reset page configured by the admin, such as https://passwordreset.microsoftonline.com/, if permission has been granted. Otherwise, contact the admin.
After regaining access, review and update security info (alternate email, phone, and verification methods) so future recovery is easier.
References: