Use the existing Microsoft account and change its aliases and security info. Do not create a separate new Microsoft account if the goal is to keep the same subscriptions, settings, storage, and sign-in identity, because aliases on one Microsoft account share the same account data and password.
- Sign in to Edit account info and manage aliases:
- Open Edit account info
- Select Add email to add the new address if it is not already added as an alias.
- Select Remove next to the old compromised address when removal is available.
- Keep the new address as the main sign-in/contact path:
- Email addresses on a Microsoft account are aliases.
- Aliases use the same contacts, storage, subscriptions, and account settings.
- Verification codes sent by email can only be sent to the primary alias or another email added as a way to verify sign-in.
- Update security verification methods separately from aliases:
- Go to the Microsoft account Security basics page and update security info.
- If the old hacked email is listed as a verification method, remove it from Security settings or Security info after adding a replacement method first.
- If prompted for a code and the old method is inaccessible, choose I don't have any of these and follow the process to replace security information.
- Important removal warning:
- If all security information is removed, the account can enter a 30-day restricted state.
- During that period, further changes or additions to security settings or billing information are not accepted.
- To avoid that, add the new security method first before removing the old one.
- If the old address was compromised, secure the account before removing anything:
- Run a full malware scan on the PC.
- Then change or reset the Microsoft account password.
- After that, review account settings such as connected accounts, forwarding, and automatic replies.
- For Windows sign-in:
- Since the PC was already switched to a local account successfully, access to the computer is preserved.
- After the Microsoft account alias/security changes are complete, sign back in with the same Microsoft account using the updated sign-in information.
- If sign-in still fails with the new address, continue using the old alias only long enough to finish alias/security changes, then remove the old alias after the new one is fully established.
- If sign-in or removal is blocked:
- Use the sign-in helper or guided support tool.
- Microsoft support can route the case, but support agents cannot send password reset links or directly change account details.
- Change the email address for your Microsoft account | Microsoft Support
- Removing a sign-in verification method | Microsoft Support
- Set up an email address as your verification method | Microsoft Support
- How to recover a hacked or compromised Microsoft account | Microsoft Support
- How to help keep your Microsoft account secure | Microsoft Support