Managing personal Outlook.com account settings, security, and privacy
Use this recovery path for a hacked personal Hotmail/Outlook.com account:
- Start with the Microsoft Sign-in Helper for compromised accounts. It asks for the email address or phone number and then provides the correct self-help steps or an option to talk to an agent.
- Before changing the password, run a full malware scan on the PC:
- Open Windows Security
- Go to Virus and threat protection
- Select Scan options > Full scan > Scan now
- After the scan, change the password if sign-in is still possible. If sign-in is no longer possible, use the password reset flow.
- After access is restored, check account settings that are commonly changed by an attacker:
- Connected accounts
- Forwarding
- Automatic replies
- If the account is blocked because of unusual sign-in activity, use the Sign-in Helper to unblock it.
- If normal recovery does not work, use the Microsoft account recovery form. A working email address is required so Microsoft can contact the account owner about the request.
Important limits:
- If two-step verification was turned on and none of the alternate verification methods are accessible, support agents cannot send password reset links or change account details.
- If the attacker changed the security information or alias, the recovery form and Sign-in Helper are the supported recovery options.