Managing personal Outlook.com account settings, security, and privacy
Check Gmail for messages from @accountprotection.microsoft.com, then use Microsoft’s security-information replacement process if no code arrives.
Check Gmail delivery
- In Gmail’s search box, enter:
from:(accountprotection.microsoft.com) - Check Spam, Trash, All Mail, and any category tabs.
- Open Gmail → Settings → See all settings → Filters and Blocked Addresses. Remove any rule that blocks, deletes, forwards, or archives messages from
accountprotection.microsoft.com. - Add
accountprotection.microsoft.comas a trusted sender. Genuine Microsoft verification-code emails come from that domain.^1^ - Verify that the first two characters of the masked Gmail address shown on Microsoft’s verification page match the intended address.
Request one new code afterward. Do not repeatedly request codes: excessive attempts can trigger a temporary block. If several requests have already been made, stop trying for at least 24 hours; Microsoft notes that some blocks can take longer—up to one week—to clear.^1^
If Gmail is your only verification option
At the Verify your identity screen:
- Select I don’t have any of these.
- Supply a new email address or other requested security information.
- Follow the prompts to replace the inaccessible verification method.
Replacing all security information starts a 30-day waiting period before sign-in is restored. If access to the original Gmail method is recovered during that period, using it to sign in cancels the replacement request.^1^
If another verification method is displayed—such as a mobile number—select that instead.
If you also forgot the Hotmail password
Use the Microsoft account recovery process. Provide:
- A working email address where Microsoft can contact you.
- Previous passwords.
- Exact subject lines and contacts from the Hotmail account.
- Other requested account details.
Complete it, if possible, from a device and location previously used with the account. Microsoft sends the result to the contact address within 24 hours; unsuccessful requests can be retried up to twice daily.^2^
The recovery form cannot recover an account when two-step verification was enabled and none of its registered verification methods are accessible. Microsoft support also cannot manually send a code, bypass verification, or change account details.^2^
References