A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
Use Microsoft’s Sign-in Helper immediately, then choose the compromised-account options to reset the password or prove ownership without relying on the unavailable Authenticator app. ^1^
Recover the account
- On a trusted device, open the Microsoft Sign-in Helper.
- Enter the original email address or phone number associated with the account.
- Follow the hacked/compromised-account prompts. The tool will provide the appropriate self-service recovery route and may offer an option to contact an agent.
- If directed to the normal sign-in page:
- Select Forgot my password.
- Select I think someone else is using my Microsoft account.
- Complete the identity-verification process. ^2^
- If directed to the account recovery form, complete it from a device and location previously used with the account. Supply as much historical information as possible, including:
- Previous passwords
- Outlook contacts and recent email subject lines
- Xbox console hardware ID, Gamertag, or purchase details
- Microsoft subscriptions or billing information
Microsoft normally reviews recovery-form answers and responds to the contact address supplied in the form within 24 hours. ^3^
If a security-information change is pending
If you regain access and see Scheduled for removal or a pending security-information change that you did not request:
- Open the Microsoft account’s Additional security options.
- Expand the affected verification method.
- Select Cancel removal.
- Remove any newly added verification methods you do not recognize.
- Change the password.
Microsoft places a 30-day waiting period on removal of a verification method, and the existing method remains usable during that period. ^4^
Do not follow links in the unexpected email unless its authenticity is certain; open Microsoft account security pages directly instead.
After access is restored
Before changing the password, run a full malware scan on the device used for recovery: Windows Security → Virus & threat protection → Scan options → Full scan → Scan now. Then:
- Set a new, unique password.
- Open Security → Review activity and mark unknown activity as This wasn’t me or Secure your account.
- Remove unfamiliar sign-in methods and add your own current phone number, alternate email, and Authenticator registration.
- In Outlook.com, inspect connected accounts, forwarding, and automatic replies for attacker-created settings. ^1^
Important recovery limitation
If two-step verification had already been enabled by you and you have lost access to every registered verification method, the recovery form cannot bypass it. Microsoft support agents also cannot send password-reset links or directly change account security details. ^3^
If the Sign-in Helper offers no successful route, use Contact Microsoft Support, select Get Help, and then Contact Support. An agent can explain the applicable recovery route, but cannot manually override ownership verification. ^5^
References
- How to recover a hacked or compromised Microsoft account | Microsoft Support
- What happens if there's an unusual sign-in to your account | Microsoft Support
- Help with the Microsoft account recovery form | Microsoft Support
- What does 'Scheduled for removal' mean? | Microsoft Support
- How to help keep your Microsoft account secure | Microsoft Support