Use Microsoft’s account recovery flow immediately:
- Start with the hacked account recovery guidance and the sign-in helper tool. It can guide to self-help steps or offer the chance to talk to an agent.
- Before changing the password, run a full antivirus or malware scan on the PC. On Windows 10, Windows Defender is already available.
- If sign-in still works, go to the Security basics page:
- Select Review activity and check for unusual sign-in attempts.
- For activity that is not recognized, select This wasn't me or Secure your account.
- Then select Change password and set a strong password.
- If sign-in does not work, use Forgot my password on the sign-in page, or use Recover your account and complete the verification steps.
- If the password reset options no longer match the account, use the Sign-in Helper tool first. If needed, complete the Microsoft account recovery form and provide as much information as possible.
- After access is restored, review account settings that attackers often change, including connected accounts, forwarding, and automatic replies.
- Add another way to sign in or verify identity in Advanced security options so future recovery is easier.
Important limits:
- If two-step verification is turned on and none of the alternate verification methods are accessible, support agents cannot send password reset links or change account details.
- If the recovery form is submitted, Microsoft sends the result to the working email provided within 24 hours. If the account cannot be verified, the form can be retried up to two times per day.