Use the Microsoft account Sign-in Helper first. It is the primary recovery path for a hacked Microsoft account and can either guide through self-help steps or offer the chance to talk to an agent.
If access is still blocked, follow this sequence:
- Scan the PC for malware before changing anything
In Windows Security, open Virus and threat protection → Scan options → Full scan → Scan now. Microsoft recommends a full scan before changing the password. - Try to change or reset the password
If sign-in is still possible anywhere, change the password immediately. If not, use the password reset flow. - Use the Microsoft account recovery form if applicable
Before filling it out, try the Sign-in Helper first.- If two-step verification is turned on and there is no access to any alternate verification method, support agents cannot send password reset links or change account details.
- If two-step verification is not turned on and the listed verification options are not recognized, use the Sign-in Helper.
- Prepare strong recovery details
When completing the recovery form, provide as much information as possible. Helpful details can include:- old passwords
- Outlook.com contacts and exact email subject lines
- Skype details if used
- Xbox console hardware ID if used
- Use a working contact email for recovery
The recovery form requires an email account that is accessible so Microsoft can respond about the request. - If the account is temporarily blocked due to unusual sign-in activity
Use the Outlook.com Sign-in Helper unblock flow. If that does not work, use the Microsoft account sign-in help path that includes password reset guidance and support contact options.
Important limits from Microsoft:
- Support agents are not allowed to send password reset links or access and change account details.
- If the attacker changed the sign-in details and normal self-help no longer works, the supported recovery path is still the official Sign-in Helper and account recovery process.
References: