A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
Yes—there are only a few supported recovery paths.
- Start with the Microsoft Sign-in Helper for hacked accounts: Start. It asks for the email address or phone number and either provides self-help steps or offers the chance to talk to an agent.
- Before changing or resetting anything, run a full malware scan on the PC that was used with the account:
- Open Windows Security
- Go to Virus and threat protection
- Select Scan options > Full scan > Scan now
- If sign-in is still possible, change the password immediately. If not, use the password reset path from the hacked-account guidance.
- If recovery options no longer match because the attacker changed the email or phone details, use the Sign-in Helper first, then the Microsoft account recovery form guidance if applicable.
- Important limitation: if two-step verification was turned on and none of the alternate verification methods are accessible, Microsoft states that support agents cannot send password reset links or change account details.
- If access is restored, review account settings that are commonly changed after compromise:
- connected accounts
- forwarding
- automatic replies
- To improve future recovery options, add another sign-in or verification method in Advanced security options after the account is secured.
If the attacker changed the account’s security information and the available recovery methods no longer belong to the account owner, recovery may not be possible through support because Microsoft does not allow agents to reset passwords or modify account security details directly.