Managing personal Outlook.com account settings, security, and privacy
- First, secure the account before doing anything else:
- Run a full malware scan on the PC. In Windows Security, open Virus and threat protection > Scan options > Full scan > Scan now.
- Change the Microsoft account password again after the scan completes.
- Check whether the account was blocked or flagged because of unusual sign-in activity:
- Use the Sign-in Helper.
- If the account still cannot be unblocked with a security code or password change, use the guidance in When you can't sign in to your Microsoft account from the sign-in flow.
- Review account security activity:
- Go to the Security basics page.
- Select Review activity.
- For any sign-in that was not recognized, select This wasn't me or Secure your account.
- Check whether the attacker changed mail settings:
- Review connected accounts.
- Review forwarding.
- Review automatic replies. These settings are specifically called out for review after an account compromise.
- If verification codes or recovery options no longer work, use the hacked-account recovery flow:
- Start with the Microsoft account hacked recovery tool.
- The tool can show self-help options or offer the chance to talk to an agent.
- If more help is needed, use Contact Microsoft Support and choose the account security path. Support can route to the best option, but support agents are not allowed to send password reset links or directly change account details.
About the encrypted emails: the available guidance covers securing and recovering the account, checking recent activity, and reviewing changed settings. It does not provide a supported process to decrypt or restore emails that were encrypted by an attacker.
Also check mailbox capacity. If the Outlook.com mailbox or OneDrive storage is full, email sending and receiving can stop.
References: