Deepak Gupta

Lock down your Microsoft account and Outlook account

9 settings, about 32 minutes. Do them in order: each one closes a door attackers use. Your ticks stay in this browser only.

0 of 9 doneAbout 32 minutes total

Scan your PC, then change your password5 minRun a full antivirus scan first. Then change your password at account.microsoft.com/security. Use one you have never used anywhere else.source
Check Recent activity3 minOpen account.live.com/Activity. For anything you don't recognize, select This wasn't me and follow the prompts.source
Keep more than one way to recover3 minAdd a second email and a phone number you control. Add new info before you remove old info. Changing all of it at once can restrict your account for 30 days.source
Turn on two-step verification5 minGo to account.microsoft.com/security and select Manage how I sign in. Under two-step verification, select Turn on and follow the steps.source
Add a passkey3 minOn your own device, open account.live.com/proofs/manage. Choose Add a new way to sign in or verify, then Face, Fingerprint, PIN, or Security Key, and follow the prompts.source
Go passwordless with Microsoft Authenticator5 minInstall Microsoft Authenticator and add your account. Then turn on the Passwordless account setting and approve the request in the app.source
Print a recovery code2 minOn the Manage how I sign in page, find the recovery code section and select Generate a new code. Print it and keep it off your devices. Any older code stops working.source
Sign out everywhere2 minIn your advanced security options, scroll to Sign out everywhere and select Sign out. It can take up to 24 hours, and it does not sign out an Xbox console.source
Check Outlook forwarding and replies4 minIn Outlook settings, check email forwarding, automatic replies, and connected accounts. Remove anything you did not set up.Unconfirmed, test pendingsource

Then

Write down where your recovery details live in the recovery kit, so a future lockout takes minutes, not weeks.

Free toolExposure CheckSee what of yours is already public.Free toolPassword Breach CheckCheck if a password shows up in known leaks.ReadHow to set up two-factor on all your accounts ReadPasskeys vs passwords

Comparing password managers or security keys? See the independent tool comparisons.

Sources and last check

Last verified: October 16, 2026. Steps checked against the platform's own help pages listed below. Device testing is ongoing; steps marked unconfirmed are still waiting for it.

How to recover a hacked or compromised Microsoft account (read 2026-10-16)
Help with the Microsoft account recovery form (read 2026-10-16)
Microsoft account has been locked (read 2026-10-16)
What happens if there's an unusual sign-in to your account (read 2026-10-16)
Unblock my Outlook.com account (read 2026-10-16)
What does "Security info change is still pending" mean? (read 2026-10-16)
What is the Recent activity page? (read 2026-10-16)
How to get a Microsoft account recovery code (read 2026-10-16)
Microsoft account sign-in helper (read 2026-10-16)
How to help keep your Microsoft account secure (read 2026-10-16)
How to use two-step verification with your Microsoft account (read 2026-10-16)
Create and save a passkey (read 2026-10-16)
How to sign out of your Microsoft account everywhere (read 2026-10-16)
Help protect your Outlook.com email account (read 2026-10-16)
Protect yourself from tech support scams (read 2026-10-16)
Avoid and report Microsoft technical support scams (read 2026-10-16)

Wrong step or changed screen? Report it. Never include passwords or codes.