change password

To change the Outlook.com password after being hacked, change the Microsoft account password, because Outlook.com uses the same password.

1. Go to https://account.microsoft.com and sign in with the hacked account if still possible.
2. At the top, select Security.
3. Select the Change Password link (this opens https://account.live.com/password/Change).
4. Enter the current password, then enter and confirm a new strong password.
5. Select Save.

If the current password is not known or sign-in is blocked, use the reset flow instead:

1. Go to Reset your Microsoft account password (linked from the articles below).
2. Follow the steps to verify identity and set a new password.

Because the account was hacked, also follow the compromised-account steps:

1. First, scan the PC for viruses or malware using an up-to-date antivirus or Windows Defender.
2. After cleaning the device and changing the password, sign in to Outlook.com on the web.
3. Check and fix mailbox settings that attackers often change:
   • Connected accounts: remove any unknown connected accounts.
   • Forwarding: turn off forwarding or remove any unknown forwarding addresses.
   • Automatic replies: turn off or edit any replies the attacker set.

If the hacker changed security info (alternate email/phone) and codes are going to them, use the hacked-account recovery guide and, if needed, the account recovery form from that guide. Once access is restored, remove any attacker-added aliases and add safer verification methods (such as Microsoft Authenticator).

References:

• How to recover a hacked or compromised Microsoft account
• Change your Microsoft account password
• Change your password in Outlook.com
• My account got hacked. - Microsoft Q&A
• My account got hacked - Microsoft Q&A
• Hacker set up continuous draft ransomware email - Microsoft Q&A