Managing personal Outlook.com account settings, security, and privacy
Use the Microsoft compromised-account recovery flow immediately:
- Start the sign-in helper and enter the Microsoft account email address or phone number that was used for the Xbox account. The tool guides to the available recovery options and may offer the chance to talk to an agent.
- Before changing the password, run a full malware scan on the PC:
- Open Windows Security
- Open Virus and threat protection
- Select Scan options > Full scan > Scan now
- After the scan completes, if sign-in is still possible, change the password. If sign-in is not possible, use the password reset path.
- If normal reset does not work, complete the Microsoft account recovery form. Use:
- a device previously used to sign in to the account
- a familiar location/network such as home or office
- a working email address that can receive Microsoft’s response
- If the account was recovered after unauthorized access, review account settings that are commonly changed during compromise, including:
- connected accounts
- forwarding
- automatic replies
- If the account is locked or sign-in still fails, use Contact Microsoft Support or the Sign-in helper. Support agents cannot send password reset links or directly change account details.
Important limits:
- If two-step verification was turned on and none of the alternate verification methods are accessible, support cannot bypass that protection.
- Do not post personal account details, recovery data, or payment details publicly.