![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(89.60000000000001, 50%, 18%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
Outlook | Web | Outlook.com | Account management, security, and privacy
Managing personal Outlook.com account settings, security, and privacy
Hello,
I am going to share with you a comprehensive list of things to do. Please feel free to skip any steps you have already completed, except the first step, which is very important.
Please complete these steps on a computer, not on a smartphone or tablet.
Step 1: Sign out everywhere FIRST
Go to https://account.microsoft.com/security and sign in.
Go to Manage how I sign in, scroll down, and click Sign out everywhere.
This is intended to disconnect any active sessions that may still have access to your Microsoft account.
IMPORTANT: This process can take up to 24 hours to fully take effect. This means someone who is already signed into your account may not be disconnected immediately. Please do not expect immediate results without waiting the full 24 hours.
Continue the following after the 24-hour wait is over.
====================
Step 2: Review your Outlook settings
Go to https://www.outlook.com and sign in.
Click the gear icon in the top right corner to open Settings.
Under Mail, review the following areas:
Rules
If any rules are listed that you did not create, delete them. If you do not use rules at all, you can delete all of them.
Conditional formatting
If anything is set up there that you did not create, delete it.
Forwarding and IMAP
If you see any entries or settings you did not create, remove them. Turn off POP and IMAP if you do not use them.
Junk
Review your Safe senders and Blocked senders lists. Remove any unfamiliar entries from the Safe senders list.
After that, exit Settings and return to Outlook.com.
Open the To Do section by clicking the blue checkmark icon on the left side. Delete anything there that was not created by you.
====================
Step 3: Review your Microsoft account
Go to https://account.live.com.
Under Your info > Sign-in preferences, review all aliases on your account. If you see any alias you do not recognize, remove it. Be careful not to delete any legitimate email address you still use.
Next, go to the Devices section of your Microsoft account and remove any devices you do not recognize.
====================
Step 4: Secure your account
Go to the Security section of your Microsoft account.
Change your password to a new, strong password that you have never used before.
Enable two-step verification.
Go to Manage how I sign in and make sure all security contact information belongs to you.
On that same page, scroll down to App passwords and remove any existing app passwords you do not need.
====================
Step 5: Review app permissions
Go to https://account.microsoft.com/privacy/app-access.
Review the apps that have permission to access your Microsoft account.
Click Don't allow for anything you do not recognize or no longer use.
==========
Step 6: Remove hidden rules.
If you use Classic Outlook on any Windows device, do this on those devices
Close Outlook completely.
Press Win + R on your keyboard to open the Run dialog.
Type outlook /cleanrules and press Enter to clear and reset client-side rule stores