Managing personal Outlook.com account settings, security, and privacy
Because the account was hacked, treat this as both a security issue and an Outlook sign-in issue.
- First, secure the Microsoft account.
- Use the sign-in helper to start account recovery and guided self-help.
- Before changing the password, run a full malware scan on the PC.
- Then change or reset the password.
- Check for account changes made by the attacker.
- Review connected accounts, forwarding, and automatic replies.
- If mail is being forwarded or unexpected replies are configured, remove them.
- Review devices and sign out everywhere if there are devices or sessions that are not recognized.
- If the repeated prompts are in classic Outlook for Windows:
- If the account is Outlook.com/IMAP and Outlook setup is involved, make sure Require logon using Secure Password Authentication (SPA) is unchecked.
- If Outlook has worked before and now keeps asking for the password, confirm the password was updated in Outlook after the account password change.
- Also verify the username is the full email address and that Caps Lock is not on.
- If Outlook is connecting to a Microsoft 365 mailbox:
- For newer Outlook 2013/2016 builds, run Diag: Outlook keeps asking for my password.
- For older affected Outlook versions, change Logon network security to Anonymous Authentication from Control Panel > Mail.
- If the issue is on Outlook 2016 for Mac:
- Install Outlook update version 15.31.0.
- If needed, remove cached Exchange passwords and modern authentication tokens from Keychain Access. This affects all Office apps that use modern authentication.
The double email notifications are not explained by the available guidance, but hacked-account symptoms and mailbox changes such as forwarding or other account setting changes should be checked first.
References: