Deepak Gupta

Microsoft account or Outlook hacked: how to get it back

Reset your password at account.live.com/password/reset after running a full antivirus scan. If Microsoft can't send a code because your phone or email was changed, use the recovery form at account.live.com/acsr. Once you are in, check Recent activity, forwarding, and automatic replies for changes you didn't make.

Do these 3 things now

1Run a full antivirus scan first, then reset your password at account.live.com/password/reset.Read to them:“Run a full antivirus scan first, then reset your password at account.live.com/password/reset.”
2If your phone and email no longer get codes, fill in the recovery form at account.live.com/acsr.Read to them:“If your phone and email no longer get codes, fill in the recovery form at account.live.com/acsr.”
3Don't reply to anyone who offers to help you get back in. Microsoft won't call you to offer support unless you asked.Read to them:“Don't reply to anyone who offers to help you get back in. Microsoft won't call you to offer support unless you asked.”

Reset your Microsoft account password

Official link: account.live.com

I am helping someone else

Helper mode: each step is written for you to read aloud. Let them tap and type on their own device; never ask them to send you a code. Send them this first.

01Is this you?

Your Microsoft account password stopped working and you didn't change it.
Recent activity shows sign-ins or changes that weren't you.
People got emails from your Outlook address that you didn't send.

Not quite? I just forgot my password · Microsoft says my account is locked · My phone suddenly lost signal · Secure the accounts that use this email

02Official recovery path

Run a full scan before you change your password. In Windows Security, go to Virus and threat protection, then Scan options, Full scan, and Scan now.Read to them:“Run a full scan before you change your password. In Windows Security, go to Virus and threat protection, then Scan options, Full scan, and Scan now.”Computersource
If you can still sign in, change your password at account.microsoft.com/security. If you can't, reset it at account.live.com/password/reset.Read to them:“If you can still sign in, change your password at account.microsoft.com/security. If you can't, reset it at account.live.com/password/reset.”source
If you can't get a security code, fill in the account recovery form at account.live.com/acsr. Do it from a device and place you usually sign in from.Read to them:“If you can't get a security code, fill in the account recovery form at account.live.com/acsr. Do it from a device and place you usually sign in from.”source
Once you are in, open account.live.com/Activity. For anything unusual, select This wasn't me. For suspicious items in Recent activity, select Secure your account.Read to them:“Once you are in, open account.live.com/Activity. For anything unusual, select This wasn't me. For suspicious items in Recent activity, select Secure your account.”source
Check your Outlook email forwarding, automatic replies, and connected accounts. Remove anything you didn't set up.Read to them:“Check your Outlook email forwarding, automatic replies, and connected accounts. Remove anything you didn't set up.”Unconfirmed, test pendingsource
If you see "Your security info change is still pending" and you didn't make that change, select let us know and follow the prompts.Read to them:“If you see "Your security info change is still pending" and you didn't make that change, select let us know and follow the prompts.”source
Generate a new recovery code so any code the attacker saw stops working. Select Generate a new code, then print it.Read to them:“Generate a new recovery code so any code the attacker saw stops working. Select Generate a new code, then print it.”source

Did that get you back in?

Yes

Lock it down now. Change the password, turn on two-step, sign out other devices. It takes about 15 minutes.

No

A.If your recovery form isn't approved, add more detail and try again. Microsoft allows up to two tries a day.Read to them:“If your recovery form isn't approved, add more detail and try again. Microsoft allows up to two tries a day.”source
B.If you have a 25-digit recovery code saved, you can use it to get back in.Read to them:“If you have a 25-digit recovery code saved, you can use it to get back in.”source
C.Use Microsoft's sign-in helper. Enter the email or phone number you sign in with, and it tells you what to do if it finds a problem.Read to them:“Use Microsoft's sign-in helper. Enter the email or phone number you sign in with, and it tells you what to do if it finds a problem.”source
D.If two-step verification is on and you can't reach any of your verification methods, Microsoft says its support can't help you get back in.Read to them:“If two-step verification is on and you can't reach any of your verification methods, Microsoft says its support can't help you get back in.”source

Then: how long it takes

03How long it takes

Published by the platform

Microsoft says it responds to a recovery form within 24 hours, at the contact email you give. If someone removed all your security info, Microsoft holds that change for 30 days and sends notices to your original info, so you have time to report it.

While you wait

Watch your old security email and phone for notices about changes to your account.
Check the junk folder of the contact email you put on the recovery form.
Change passwords on other sites that use this Outlook address to sign in or reset passwords.
Warn your contacts that emails from your address may not be from you.

04Warn your contacts

Send this from another account or by text, so nobody falls for messages sent in your name.

My Outlook / Microsoft account [address] was hacked on or around [date]. If you got an email from me asking for money, gift cards, a code, or to open a file or link, it was not me. Please delete it and don't reply. I will tell you when it's safe again.

More templates: email, followers, customers

05Watch out for recovery scams

People who just lost an account are the main target of fake helpers. Only Microsoft account and Outlook's own app or website can restore your account.

Calls from "Microsoft Support". Microsoft says that if you didn't ask it to, it won't call you to offer support. Hang up. How it works
Pop-ups and search results with a "Microsoft support" phone number. Microsoft says its real error messages never include a phone number to call. How it works
Fake support numbers placed in search ads. Microsoft also says it will never ask you to pay for support in gift cards or cryptocurrency. How it works

All recovery scams and how to spot them

06Once you're back in: lock it down

0 of 9 doneAbout 32 minutes total

Scan your PC, then change your password5 minRun a full antivirus scan first. Then change your password at account.microsoft.com/security. Use one you have never used anywhere else.source
Check Recent activity3 minOpen account.live.com/Activity. For anything you don't recognize, select This wasn't me and follow the prompts.source
Keep more than one way to recover3 minAdd a second email and a phone number you control. Add new info before you remove old info. Changing all of it at once can restrict your account for 30 days.source
Turn on two-step verification5 minGo to account.microsoft.com/security and select Manage how I sign in. Under two-step verification, select Turn on and follow the steps.source
Add a passkey3 minOn your own device, open account.live.com/proofs/manage. Choose Add a new way to sign in or verify, then Face, Fingerprint, PIN, or Security Key, and follow the prompts.source
Go passwordless with Microsoft Authenticator5 minInstall Microsoft Authenticator and add your account. Then turn on the Passwordless account setting and approve the request in the app.source
Print a recovery code2 minOn the Manage how I sign in page, find the recovery code section and select Generate a new code. Print it and keep it off your devices. Any older code stops working.source
Sign out everywhere2 minIn your advanced security options, scroll to Sign out everywhere and select Sign out. It can take up to 24 hours, and it does not sign out an Xbox console.source
Check Outlook forwarding and replies4 minIn Outlook settings, check email forwarding, automatic replies, and connected accounts. Remove anything you did not set up.Unconfirmed, test pendingsource

Then do the 24-hour cleanup.

Free toolExposure CheckSee what of yours is already public.Free toolPassword Breach CheckCheck if a password shows up in known leaks.ReadEmail hacked: 7 immediate steps ReadHow do I know if my email was leaked?

07How it probably happened

Most likely
A fake Microsoft sign-in page that captured your password
How this scam works
Also common
Malware on your PC that stole saved passwords
How this scam works
Less common
A password reused from another site that was breached

Account taken, recovery details swapped

08Report it

Report a scam to Microsoft (microsoft.com/reportascam)

Lost money, being blackmailed, or someone is using your account to scam others? Report it to your country's cybercrime service too. If you are in danger, call your local emergency number.

United States

FBI Internet Crime Complaint Center (IC3)Report online crime, including account takeovers that led to money loss or extortion. The IC3 never contacts you first and never asks for money.
FTC ReportFraudReport the scam to the Federal Trade Commission.
IdentityTheft.govUse it if someone used your Social Security number or opened accounts in your name. You get a recovery plan.

United Kingdom

Report Fraud (England, Wales and Northern Ireland)Run by the City of London Police. It replaced Action Fraud on 4 December 2025. In Scotland, call Police Scotland on 101 instead.
Forward scam texts to 7726Free on most UK networks. Your provider can look into the sender and block it.
Report a scam email to the NCSCForward the email to report@phishing.gov.uk before you delete it.
Report Fraud: 0300 123 2040England, Wales and Northern Ireland. In Scotland, call Police Scotland on 101.

India

National Cyber Crime Reporting PortalRun by the Indian Cyber Crime Coordination Centre (I4C), Ministry of Home Affairs. Reports go to state and UT police.
Chakshu on Sanchar SaathiReport suspected fraud calls, SMS or WhatsApp messages to the Department of Telecommunications. It is not for money already lost: call 1930 for that.
National Cyber Crime Helpline: 1930Toll free, 24 hours. Call fast if money left your account: it can help freeze the transfer.

Canada

Canadian Anti-Fraud Centre: report onlineVictims and witnesses can report fraud or cybercrime online. Also contact your local police as soon as you can.
Canadian Anti-Fraud Centre: 1-888-495-8501Toll free. The CAFC does not contact people to ask for money.

Australia

ReportCyberReport cybercrime to police. Your report may go to your state or territory police or the AFP.
ScamwatchReport a scam, even if you lost no money. The AFP also points people worried about identity theft to IDCARE, a free support service.
ReportCyber phone line: 1300 292 371Report concerns about cybercrime or cyber security incidents. If life is at risk, call 000.

09Questions people ask

Can I call Microsoft to get my account back?

Microsoft says its support agents can't send password reset links or access or change account details. Use the password reset page or the recovery form. Microsoft won't call you to offer support unless you asked.

How long does the recovery form take?

Microsoft says it responds within 24 hours, by email to the working contact address you gave on the form.

How many times can I send the recovery form?

Microsoft says you can keep trying, up to two times per day. Add new details each time rather than sending the same answers.

The hacker removed my security info. What can I do?

Microsoft puts that change on hold for 30 days. Sign in to the Security page, and in the "Your security info change is still pending" window select let us know.

Why scan my PC before changing the password?

Microsoft says to run a full scan before you change your password. If malware is still on your PC, it could capture the new password too.

Sources and last check

Last verified: October 16, 2026. Steps checked against the platform's own help pages listed below. Device testing is ongoing; steps marked unconfirmed are still waiting for it.

How to recover a hacked or compromised Microsoft account (read 2026-10-16)
Help with the Microsoft account recovery form (read 2026-10-16)
What is the Recent activity page? (read 2026-10-16)
What does "Security info change is still pending" mean? (read 2026-10-16)
How to get a Microsoft account recovery code (read 2026-10-16)
Microsoft account sign-in helper (read 2026-10-16)
Protect yourself from tech support scams (read 2026-10-16)

Wrong step or changed screen? Report it. Never include passwords or codes.