- Use the Microsoft account sign-in helper first. It can guide to the right self-help steps or offer the chance to talk to an agent.
- Before changing the password, run a full malware scan on the PC:
- Open Virus and threat protection
- Select Scan options > Full scan > Scan now
- After the scan, try to change or reset the password.
- If sign-in still fails, use the recovery path shown by the sign-in helper.
- If the sign-in flow is trying to send a code to an email address that is not recognized, select I don't have any of these during sign-in and follow the prompts.
- If access is restored, immediately review account settings that attackers commonly change:
- Connected accounts
- Forwarding
- Automatic replies
- Then strengthen the account to prevent this happening again:
- Add another way to sign in or verify identity in Advanced security options
- Use the Microsoft Authenticator app
- Consider going passwordless
- If the account email was changed by the attacker and normal recovery no longer works, use Contact Microsoft Support and choose Get Help / Contact Support for account recovery assistance. Support agents cannot send password reset links or directly change account details, but the official support flow is the escalation path.
- For a work or school account, review recent sign-in activity in My Account > Recent Activity and change the password if unfamiliar successful sign-ins appear.
References: