A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
The official recovery path is to use Microsoft’s hacked-account recovery flow and the Microsoft account recovery form.
- Start with the hacked-account recovery process and sign-in helper.
- Microsoft’s recovery tool asks for the email address or phone number and then shows the available self-help options or may offer the chance to talk to an agent.
- If the original sign-in address now shows as nonexistent, still use the recovery form with that original address.
- If the form says the account does not exist, first carefully check the spelling of the address and domain.
- Microsoft sends the result of a recovery form submission to the working contact email entered at the start of the form within 24 hours.
- If Microsoft cannot verify the account, the form can be retried up to two times per day.
- If sign-in is still possible anywhere in the flow, use the compromised-account option.
- On the sign-in page, select Forgot my password and then I think someone else is using my Microsoft account.
- Secure the device before changing any password.
- Run a full antivirus scan first.
- In Windows Security, open Virus and threat protection > Scan options > Full scan > Scan now.
- After malware scanning, change or reset the password.
- If access is restored, immediately change the password and use a strong new password.
- Review account security activity and settings after recovery.
- Go to the Security basics page and select Review activity to inspect unusual sign-in attempts.
- If unauthorized activity appears, mark it using This wasn’t me or Secure your account as shown on the activity page.
- Then review account settings such as connected accounts, forwarding, and automatic replies.
- For Microsoft security emails, only trust messages from the Microsoft account team domain @accountprotection.microsoft.com.
Important limits:
- Microsoft support agents are not allowed to send password reset links or access and change account details.
- Recovery depends on Microsoft being able to verify ownership through the official recovery process.
For Minecraft Java Edition ownership and purchases, keep purchase and account history available for the official recovery process, but do not post that information publicly.
References:
- How to recover a hacked or compromised Microsoft account | Microsoft Support
- Help with the Microsoft account recovery form | Microsoft Support
- What happens if there's an unusual sign-in to your account | Microsoft Support
- Can I trust email from the Microsoft account team? | Microsoft Support
- How to check if your email address is a Microsoft account | Microsoft Support
- Check the recent sign-in activity for your Microsoft account