Managing personal Outlook.com account settings, security, and privacy
Use this recovery path immediately:
- Start with the Microsoft sign-in helper for hacked or blocked accounts:
- Before changing anything else, scan the PC used for that account:
- Open Windows Security.
- Go to Virus and threat protection.
- Select Scan options > Full scan > Scan now. This is important because Microsoft recommends a full malware scan before changing the password.
- If access is regained, immediately change the password:
- Go to the account security page and choose Change password.
- Use a strong new password.
- Review recent sign-in activity:
- Sign in to Security basics at https://account.microsoft.com/security.
- Select Review activity.
- For activity that is not recognized, select This wasn't me or Secure your account.
- Check whether the attacker changed mailbox settings:
- Review connected accounts.
- Review forwarding.
- Review automatic replies. Microsoft states these settings may be reset after compromise and should be checked.
- If the password no longer works, use the Microsoft recovery flow:
- On the sign-in page, select Forgot my password.
- Then select I think someone else is using my Microsoft account and follow the recovery steps.
- If the account is temporarily blocked because of unusual activity, use the unblock flow:
- If the recovery form has already been submitted and there has been no response, use Microsoft support contact options from the account support pages:
Important limits:
- Microsoft support agents are not allowed to send password reset links or access and change account details.
- The supported recovery route is the sign-in helper, password reset flow, and account recovery process.
For the payment card attached to the account, no card-protection steps are provided in the available support content.
References: