Someone has been trying to hack into my account for about 6 hours, I need help.

Take immediate steps to secure the account and reduce the risk of takeover:

1. Review recent sign-in activity

• Go to the Security basics page for the Microsoft account: https://account.microsoft.com/security
• Select Review activity and check the Recent activity page.
  • For any sign-in that is not recognized, expand it and choose:
    • This wasn’t me (under Unusual activity), or
    • Secure your account (under Recent activity).
• This flags the activity and walks through securing the account.

2. Change the password immediately

• From the Security basics page, select Change password.
• Set a strong, unique password that is not used on any other site.
• Do this from a trusted device and network that is known to be clean.

3. Add and verify more than one security method

• Go to Advanced security options for the Microsoft account.
• Select Add a new way to sign in or verify and add at least one additional method (for example, another email or phone, or another secure method).
• Ensure all listed phone numbers and email addresses are valid and under control.

4. Check for security-info changes or pending lock

• If a message appears such as “Your security info change is still pending” or “You can’t access this site right now”, it means all previous security info was removed and replaced.
  • In that case, the account is in a restricted 30‑day state where some sensitive actions are blocked until the change completes.
  • During this period, most services can still be used, but some sensitive pages and OneDrive Personal Vault are blocked.

5. If verification is being blocked or codes fail

• If a “Try another verification method” message appears or verification is blocked:
  • Try another verification method already configured (for example, alternate email instead of SMS).
  • Try another network (switch Wi‑Fi/cellular or use a different Wi‑Fi).
  • Wait at least 24 hours without repeated attempts if a temporary block is suspected; repeated attempts can extend the block.
  • Use the Sign-in helper if sign-in issues persist: https://aka.ms/sign-in-helper

6. If the account may already be compromised

• Use the official recovery and protection guidance for hacked accounts: follow the steps in How to recover a hacked or compromised Microsoft account, starting from the sign-in helper at https://go.microsoft.com/fwlink/?linkid=2196140.
• After regaining control, review mailbox rules, forwarding, and security info, and remove anything not recognized.

7. Ongoing protection

• Keep at least two independent security options on the account (for example, authenticator plus a phone or alternate email).
• Regularly review security info and update anything that is no longer valid.
• Avoid staying signed in on shared or public devices; always sign out and close the browser.

These steps do not “block” the account completely, but they harden it, flag suspicious activity, and ensure only verified sign-ins succeed.

References:

• What happens if there's an unusual sign-in to your account
• How to help keep your Microsoft account secure
• What does “Security info change is still pending” mean?
• Troubleshoot Microsoft verification code issues
• How to recover a hacked or compromised Microsoft account