Managing personal Outlook.com account settings, security, and privacy
Use the official hacked-account recovery path first, then secure any device or mailbox that still has access.
- Start the Microsoft hacked-account recovery flow:
- Use the Sign-in Helper from the hacked account article.
- It asks for the email address or phone number and then shows the available self-help options or may offer the chance to talk to an agent.
- Before changing anything, scan the PC for malware:
- Open Windows Security.
- Go to Virus and threat protection.
- Select Scan options > Full scan > Scan now.
- This is important before changing the password.
- Change or reset the password:
- If sign-in still works anywhere, change the password immediately.
- If sign-in does not work, use the password reset path in the Microsoft account recovery guidance.
- Review account security settings after access is restored:
- Check connected accounts.
- Check forwarding.
- Check automatic replies.
- These settings may have been changed during the compromise.
- If the account is blocked because of unusual sign-in activity:
- Use the Outlook.com unblock flow.
- If the mailbox or OneDrive storage is full, email send/receive can also fail until space is cleared.
- If the helper flow does not restore access:
- Use When you can't sign in to your Microsoft account from the unblock/sign-in guidance.
- The sign-in helper can also route to support options.
- Support can provide guidance, but support agents are not allowed to send password reset links or access and change account details.
- If an unusual sign-in alert was received and access is still possible:
- Go to Security basics.
- Select Review activity and inspect the Recent activity page.
- For activity that is not recognized, select This wasn't me or Secure your account as shown there.
The screenshots, Xbox sign-in state, Microsoft Store sign-in state, old email address, and backup email can help during the official recovery process, but the supported recovery path is still the Microsoft account recovery and sign-in helper flow.