Managing personal Outlook.com account settings, security, and privacy
Since rules and forwarding are already checked, focus on account recovery and security info first:
- Run a full malware scan on the PC before making more account changes.
- In Windows Security, open Virus and threat protection.
- Select Scan options > Full scan > Scan now.
- This matters because if the device is still compromised, new passwords or codes can be intercepted.
- Review Outlook.com account settings that are commonly changed after a hack.
- Check connected accounts, forwarding, and automatic replies.
- Also review aliases and sign-in methods under account security, and remove anything unfamiliar.
- Remove unrecognized devices and use Sign out everywhere if available.
- Verify that the security info used for sign-in is correct.
- Go to the Security page and select Update info.
- Confirm the email address or phone number shown for verification is actually the correct one.
- If a method no longer works, choose a method that does work, or choose I don't have any of these to replace the security info.
- Check why messages may not be arriving.
- Verification emails can go only to the primary alias or another email added as a sign-in verification method.
- Check Junk mail for messages from @accountprotection.microsoft.com and mark that sender as trusted.
- Avoid repeated code requests, because unusual activity or too many requests can temporarily block code delivery.
- If the account was flagged for unusual activity or locked, verification messages might not go through until that issue is resolved.
- If the alternate verification email is another Microsoft account, use two private browsing windows.
- Keep the first sign-in window open.
- Open a second InPrivate/private window and sign in to the alternate mailbox there to retrieve the code.
- This avoids being signed out of the first account while trying to read the code.
- If the account is still blocked or unusual activity is suspected, use the sign-in helper or account recovery flow.
- Reset/recover the account at Recover your account.
- If Outlook.com is temporarily blocked, start with Sign-in Helper.
- If recovery does not work, use Contact support.
- If the mailbox was hacked, review mailbox behavior again on a computer.
- Recheck Rules, Forwarding, and IMAP.
- Check aliases, contact info, and app passwords, and remove anything unfamiliar.
Important: support agents cannot send verification codes or change account details for security reasons.
References:
- How to recover a hacked or compromised Microsoft account
- Troubleshoot Microsoft verification code issues
- Unblock my Outlook.com account
- My username and password have stopped working
- Can I trust email from the Microsoft account team?
- my email has been hacked and I cannot receive emails - Microsoft Q&A