Managing personal Outlook.com account settings, security, and privacy
Follow these steps in order, based strictly on the available options for consumer Microsoft/Outlook.com accounts:
- If the password is no longer accepted
- Go to Recover your account and start a password reset:
- Use the email address, phone number, or Skype name tied to the account.
- Follow the flow to receive and enter a security code, then set a new password.
- Detailed steps are in My username and password have stopped working:
- Select Recover your account and enter the sign-in email/phone/Skype.
- Choose where to get the security code and select Next.
- Enter the requested info and select Send code.
- Enter the code in Verify your identity, then Next.
- Enter a New password and confirm it.
- Go to Recover your account and start a password reset:
- If the recovery flow says the account/username is not recognized
- Use the Sign-in Helper tool as described in I can't sign in to my Microsoft account:
- If you see messages like “We couldn't find an account with that username” or “account doesn't exist”, use the Sign-in Helper tool to confirm whether the account still exists and to get guided recovery steps.
- If the account has not been used for more than two years, it may have been deleted and cannot be reopened.
- Use the Sign-in Helper tool as described in I can't sign in to my Microsoft account:
- If the account is locked or blocked (suspicious activity)
- If the sign-in page does not show Next or indicates the account is locked:
- The account may be locked due to suspicious activity or Terms of Use violations.
- Use the aka.ms/ link shown in the lock message window to submit the account reinstatement form.
- After submitting, a Microsoft Online Safety agent reviews it and contacts by email. Do not submit multiple forms, as that can slow the response.
- If the sign-in page does not show Next or indicates the account is locked:
- If verification codes are not arriving or recovery form is failing
- For missing codes or lost access to security info, follow Troubleshoot Microsoft verification code issues:
- If the password is known but access to some security info is lost:
- Sign in to Advanced security options for the Microsoft account.
- Select Add a new way to sign in or verify and set a new phone/email.
- Confirm via the code sent to the new method.
- Expand the old method that is no longer accessible and select Remove.
- Avoid changing all security info at once, or the account may be restricted for 30 days.
- If the password is known but access to all security info is lost:
- Begin sign-in.
- At Verify your identity, select I don't have any of these.
- Follow the instructions to replace security info.
- After replacement, there is a 30‑day wait before normal sign-in is allowed. Existing security info can still be used during this period, but doing so cancels the change.
- If the password is not known and there is no access to security info:
- Read Help with the Microsoft account recovery form.
- Submit the request via the account recovery form.
- If the password is known but access to some security info is lost:
- For missing codes or lost access to security info, follow Troubleshoot Microsoft verification code issues:
- If the recovery form keeps failing or limits are hit
- As described in the Q&A references, account recovery for consumer accounts is fully automated; support agents and forum moderators cannot manually unlock or bypass the system.
- If the daily limit for the recovery form or verification attempts is reached, wait for the lockout period (typically about 24 hours) before trying again. Additional attempts during this time can reset the cooldown.
- When retrying the recovery form:
- Use a familiar device and network.
- Provide as much accurate detail as possible (old passwords, contacts, subject lines, etc.).
- If the account was hacked and security info changed
- If access is regained and the attacker added their own email/phone:
- Go to Advanced security options.
- Add a new secure verification method (phone, email, or Microsoft Authenticator).
- Remove any unrecognized security info and aliases.
- If the attacker replaced all security info and the account is in a “security info change pending” state, follow the guidance in What does security info change is still pending mean? (linked from the verification-code article) and use the built‑in options on that screen (such as Cancel this request or Let us know) if available.
- If access is regained and the attacker added their own email/phone:
- About getting a “real person”
- For consumer Outlook.com/Microsoft accounts, direct human support cannot override or bypass the automated recovery and security systems. The official and only supported paths are:
- Password reset / account recovery flows.
- Account reinstatement form when locked.
- Account recovery form when password and security info are unavailable.
- For consumer Outlook.com/Microsoft accounts, direct human support cannot override or bypass the automated recovery and security systems. The official and only supported paths are:
If none of the above flows succeed and the recovery form ultimately does not validate ownership, the context indicates there is no additional escalation path for consumer accounts, and the account may not be recoverable.
References:
- I can't sign in to my Microsoft account
- Microsoft account has been locked
- My username and password have stopped working
- Troubleshoot Microsoft verification code issues
- Common problems with two-step verification for a work or school account
- I need to speak with a real person and it seems impossible. - Microsoft Q&A
- Locked out of my Outlook account and recovery options not working - Microsoft Q&A
- My personal hotmail account hacked by hacker with authentication app enabled. - Microsoft Q&A
- My account got hacked. - Microsoft Q&A
- My account got hacked - Microsoft Q&A