Managing personal Outlook.com account settings, security, and privacy
Secure the compromised account first, remove any unauthorized forwarding or rules, and then recover the missing messages and contacts from Outlook.com’s deleted-item recovery areas.
1. Secure the account
Perform these steps from a trusted computer:
- Run a full malware scan before changing the password.
- In Windows Security, open Virus & threat protection.
- Select Scan options → Full scan → Scan now.
- After the scan, change the Microsoft account password to a new, unique password. If you cannot sign in, use Microsoft’s password-reset process.
- Review the account’s connected accounts, forwarding, and automatic replies, removing anything you did not configure.
- Use Microsoft’s hacked-account sign-in helper if access or security verification remains a problem. It can provide self-help or an option to contact an agent. ^1^
Also review the account’s Recent activity for unfamiliar devices, locations, successful sign-ins, or security changes. Add a current recovery phone number and alternate email address. ^2^
2. Remove malicious mail rules
An unauthorized rule may be moving or deleting incoming messages.
On a computer, sign in to Outlook.com and:
- Select Settings (gear icon).
- Open Mail → Rules.
- Delete any rule you do not recognize, particularly one that deletes, archives, moves, or redirects messages.
- Open Mail → Forwarding and remove or disable any destination you did not set.
- Check Automatic replies and connected accounts for unauthorized changes.
Outlook.com rules must be reviewed on a computer. ^3^
3. Recover missing email
Check these locations in Outlook.com:
- Deleted Items
- Select the missing messages and choose Restore.
- If they are not visible there:
- Open Deleted Items.
- Above the message list, select Recover items deleted from this folder.
- Select the messages and choose Restore.
- Also inspect:
- Archive
- Junk Email
- The Other tab, if Focused Inbox is enabled
- Above the Inbox, select Filter → All to ensure filtering is not hiding messages.
Use a PC or Mac for the recoverable-items step; it is unavailable in Outlook mobile apps and mobile browsers. Messages removed from Deleted Items are recoverable for 30 days, while messages in Junk Email are automatically removed after 30 days and then cannot be recovered. ^3^
4. Restore the contact list
In Outlook.com:
- Select People in the navigation pane.
- Select Deleted.
- Select each missing contact or contact list, right-click it, and choose Restore.
- If the contacts are not there:
- Remain under People → Deleted.
- Select Recover deleted at the top.
- Select the contacts and choose Restore.
- If they still do not appear, open Mail → Deleted Items, locate the contact items, right-click them, and select Restore.
Recovered contacts return to their original folder when possible; otherwise, they return to the default Contacts folder. ^4^
If recovery is unsuccessful
If items do not appear in Deleted, Deleted Items, or the corresponding recovery area, they may no longer be recoverable. In Outlook.com, select Help on the menu bar, describe the compromised account, and continue to Still need help? → Yes to contact Outlook.com support. ^3^
References