Managing personal Outlook.com account settings, security, and privacy
Hey there, lauren wells
Please can you sign into your Microsoft account security page here: https://account.live.com/proofs/manage/additional
Once you have signed into your account, please check your security information for your account. Please replace any information you don't have access to anymore (such as email addresses, passkeys etc...) with up to date methods. Please remove any security methods that do not belong to you.
Once this has done, please scroll down to the bottom of the security page to where it says "Recovery code"
Please click onto "Generate a new code"
This will generate you a new recovery code you can use to get back onto your account if you no longer have access to any of your security methods. A Microsoft account can only have one active code, so any previous codes generated will no longer work anymore.
This is important because if the hacker has generated their own code, you can change your password and update your security information until you are blue in the face. The person who has compromised your account will be able to use the recovery code they have generated for your account to sign into your account and change your information.
Please be aware that the sign out everywhere option does not work for the Xbox consoles. So clicking this will only sign your account out of Windows, apps, browsers, and anywhere else your account has been used to sign into. Just not Xbox. This also takes up to 24 hours to complete.
Once you have done this, and made sure two-step verification is enabled. You may want to check your Microsoft account alias to make sure they haven't added an alias for your account here: https://account.live.com/names/manage
If they have, please remove it.
With regards to the Xbox console, by changing your password, it will force them to have to sign into your account with the new Microsoft account password. This can take 24 hours to sync across though. I would recommend adding a passcode for your account on Xbox. This will force them to have to enter it before signing into your account. You can learn how to do this here: https://support.xbox.com/en-US/help/family-online-safety/passkey-guest-key/create-and-manage-xbox-one-passkey
With regards to the Home Xbox feature. According to the Xbox support article, you would have to wait until November to change this again. However, in your case, I would reach out to Xbox support about this to see if there is any options available due to your account being compromised. You can reach out to Xbox support via this link: https://support.xbox.com/contact-us
They may be able to channel this to someone who may be able to assist with the home Xbox feature.
Hope this helps,
Nathan