Managing personal Outlook.com account settings, security, and privacy
Use this recovery path first, then check the mailbox settings that are commonly changed after an account compromise:
- Start the Microsoft account recovery flow: Start
- This guides account recovery and can offer self-help or the chance to talk to an agent.
- Before changing the password again, run a full malware scan on the PC.
- In Windows Security, open Virus and threat protection.
- Select Scan options > Full scan > Scan now.
- This is important before changing the password.
- Change the Microsoft account password, or reset it if sign-in fails.
- Change password: change your password
- Reset password: reset your password
- Check whether the account is blocked or storage is full.
- If unusual sign-in activity was detected, the account may be temporarily blocked. Use the Sign-in Helper to unblock it.
- If Outlook.com mailbox or Microsoft cloud storage is full, new mail cannot be received. Messages sent while storage was full can bounce back to the sender and are unrecoverable.
- In Outlook.com on the web, check the mailbox settings most often changed by attackers:
- Mail > Rules: remove suspicious rules.
- Forwarding: make sure mail is not being forwarded elsewhere.
- Connected accounts, forwarding, and automatic replies: review and correct anything unfamiliar.
- Check where the missing mail may be landing:
- Other tab
- Junk Email folder and Junk Email settings
- Deleted Items or other folders
- Filter > Sort > Date to restore chronological order
- If mail is missing only on one device, remove the partnership between that mobile device and the mailbox to fix sync issues.
- If access still cannot be restored after the security code or password change, use When you can't sign in to your Microsoft account.
If the issue started right after the account was hacked, the most likely causes supported here are: the account is blocked, storage is full, or mailbox settings such as rules or forwarding were changed.