Managing personal Outlook.com account settings, security, and privacy
This is likely a phishing email, not a legitimate Microsoft password-expiration notice for an Outlook.com or Microsoft personal account.
Supported checks:
- Do not click links or open attachments in that email.
- If the message claims urgent action such as account deactivation or password expiry within hours or days, that is a common phishing pattern.
- A legitimate Microsoft account security email can be trusted when the sender domain is @accountprotection.microsoft.com.
- Check account status directly with Microsoft’s sign-in helper: Sign-in helper
- If a password change is needed for Outlook.com, it uses the same password as the Microsoft account.
- If any link in the email was already clicked or credentials were entered, change the Microsoft account password immediately.
Microsoft support content also states that Microsoft does not deactivate an account because a password was not changed within a short deadline, and emails with that kind of warning are commonly phishing.
References:
- Can I trust email from the Microsoft account team?
- Change your password in Outlook.com
- I have received an email requesting I provide a new password or else in 24 hours my account will be deactivated - Microsoft Q&A
- received an email from [Moderator note: personal info removed]@alerts-microsoft.com - Microsoft Q&A
- Outlook our of date - Microsoft Q&A