if someone hacked me and changed my username to something bad how do i change it back and get my account back

Secure the Microsoft account by resetting—not changing—the password, then restore the Minecraft Java profile name when its 30-day cooldown ends; Minecraft documents no way to bypass that cooldown, even when the name was changed during a compromise.

1. Secure the account and reset the password

Because the previous password no longer works:

1. In Windows Security, open Virus & threat protection.
2. Select Scan options → Full scan → Scan now. Complete this before entering a new password, in case malware captured the old one.
3. Open Microsoft’s hacked-account recovery page and use its sign-in helper.
4. Choose Forgot password or Reset password, receive a security code using an email address or phone number attached to the account, and create a new, unique password. A password reset is the appropriate path when the current password is unknown; Change password requires the current password.^1^^2^
5. Afterward, open the Microsoft account Security basics page, review the recovery email addresses and phone numbers, remove anything you do not recognize, and add Microsoft Authenticator or another verification method.^3^

Do not post passwords, verification codes, or recovery codes here or send them to anyone claiming to be support.

2. If Microsoft shows a 30-day security hold

This is separate from Minecraft’s username cooldown. It applies only if you see “Your security info change is still pending” or “You can’t access this site right now.”

Because you did not authorize the account changes:

1. Sign in to the Microsoft account Security page.
2. In Your security info change is still pending, select let us know near the bottom.
3. Follow the prompts to report the unauthorized change.

During this hold, password updates requiring a security code are blocked. Microsoft states that the 30-day process cannot be expedited; reporting the unauthorized change is the applicable route when somebody else changed the security information.^4^

3. Restore the Minecraft Java name

For Minecraft: Java Edition:

1. Sign in at Minecraft.net with the recovered Microsoft account.
2. Open My Games or All Games.
3. Under Minecraft: Java Edition, select Change Profile Name.
4. Enter the previous name if it is available.

A Java profile name can be changed only once every 30 days. If the attacker changed it yesterday, the normal name-change page will remain unavailable until that cooldown expires; recovering the Microsoft account does not reset it.^5^

Because the current name resulted from a compromised account and you consider it offensive, use Contact Support on that Minecraft Help page and report an unauthorized profile-name change. Include:

• The old and current profile names
• The approximate date and time of the compromise
• A statement that access has been recovered
• A screenshot of the cooldown message, if shown

Minecraft’s published rule does not promise that Support can remove or shorten the cooldown, so plan to change the name after 30 days unless Support grants an exception.

References

1. How to recover a hacked or compromised Microsoft account | Microsoft Support
2. Change your Microsoft account password | Microsoft Support
3. How to help keep your Microsoft account secure | Microsoft Support
4. What does “Security info change is still pending” mean? | Microsoft Support
5. View or Change Your In-Game Profile Name in Minecraft