Managing personal Outlook.com account settings, security, and privacy
If the Hotmail account is already compromised and the hackers changed passkeys or recovery methods, the supported recovery path is:
- Try the Sign-in Helper first. It is the recommended first step for blocked, hacked, or inaccessible Microsoft accounts.
- If the account cannot be recovered there, complete the Microsoft account recovery form using a working email address that can receive Microsoft’s response.
- Provide as much accurate account history as possible in the recovery form. Microsoft reviews the submission and sends the result to the working email address within 24 hours.
- If the request is not verified, the form can be submitted again up to two times per day.
- If two-step verification was turned on and none of the alternate verification methods are accessible, support agents cannot reset the account, send password reset links, or change account details.
For an account tied to Family Safety and Xbox, securing related access is also important:
- Check the Microsoft account’s recent activity page to review sign-ins and security challenges if access is still possible.
- Add as much security info as possible, such as an alternate email address and mobile phone number, once access is restored.
- Change passwords on any other accounts that use the same email address, and make sure they use a strong, unique password.
- Turn on multi-factor authentication on accounts that still remain accessible.
- Be cautious with suspicious messages, attachments, and links, and use safe/block sender controls in Outlook.com.
If the account is temporarily blocked because of unusual sign-in activity, use the Sign-in Helper to unblock it. If that still fails, use the Microsoft sign-in troubleshooting path or Contact Support. Support can help identify options, but cannot bypass account ownership verification or directly change account details.
References: