Managing personal Outlook.com account settings, security, and privacy
Use the Microsoft account recovery path immediately:
- Start the hacked-account recovery flow with the sign-in helper tool: Start.
- Before changing any password, run a full antivirus or malware scan on the PC. Microsoft’s guidance is to clear malware first, then change or reset the password.
- If sign-in still works anywhere, go to the Microsoft account Security basics page, review recent activity, and mark suspicious activity as This wasn't me or Secure your account.
- Change the password from the Security basics page, or reset it through the password reset flow if sign-in fails.
- After access is restored, check account settings that attackers commonly change: connected accounts, forwarding, and automatic replies.
If the attacker changed the primary email or sign-in alias and the original address is no longer recognized, use the Microsoft account recovery form guidance and the Sign-in Helper tool. The recovery form requires a working email address that can receive Microsoft’s response.
If the sign-in page says the username no longer exists or the alias was turned off, try Forgot your username? or another alias/phone number previously added to the account.
If two-step verification was enabled and none of the alternate verification methods are accessible, support agents cannot send password reset links or change account details.
- How to recover a hacked or compromised Microsoft account
- How to recover a hacked or compromised Microsoft account
- What happens if there's an unusual sign-in to your account
- Help with the Microsoft account recovery form
- My username and password have stopped working
- How to fix "This username has been turned off" error