Outlook account actively getting compromised/hacked

Jano Tallie 20 Reputation points
2026-05-12T15:46:13.87+00:00

Hi,

I’m currently dealing with someone repeatedly gaining access to this account, and I’m at a complete loss as to what else I can do.

I’ve been monitoring my phone constantly for unusual sign in notifications. Whenever I receive one, I immediately reset my password, but roughly an hour later they somehow manage to sign in again.

So far I have:

  • Changed my recovery email address
  • Disabled password sign-in where possible
  • Created a brand-new recovery email account used only for security codes
  • Set up the Microsoft Authenticator app
  • Completely wiped my devices to rule out malware or viruses.

Since the above was done, I haven’t yet seen another sign-in attempt, but I’m still very concerned that they may regain access again.

At this point I’m not sure what else to try. Any advice or guidance would be greatly appreciated.

Thank you.

Outlook | Web | Outlook.com | Account management, security, and privacy
0 comments
Answer accepted by question author
EmilyS726 266.1K Reputation points Independent Advisor
2026-05-12T16:20:30.57+00:00

Hello

Looks like what you did might have already taken effect, but here are some other areas to check and review.

Go to https://account.live.com. go to the Devices section of your Microsoft account and remove any devices you do not recognize.

Go here https://account.microsoft.com/privacy/app-access Click on "Don't allow" for anything you don't recognize.

Then go to Security > Manage how I sign in and make sure all contact information belongs to you.

On that same page, scroll down to App passwords and remove any existing app passwords.

Also on the same page, click on Sign out everywhere. This is intended to disconnect any active sessions that may still be connected. Please note that this can take up to 24 hours to fully take effect.

A step further:

Go to your Microsoft account online https://account.live.com> Sign in > Your info > Sign in preference. Add an alias - You have two options here:

Create new: this will allow you to use the native domain outlook.com to create a new alias.

Add existing: this will allow you to add a 3rd party email address, such as yahoo, gmail, as long as they are not already associated with another Microsoft account.

Once added, make this new alias your primary alias, do NOT delete the old alias. Then at the bottom, click on "Change sign in preference". On the next page, uncheck the box for the old alias. This means, from now one, the old alias cannot be used to sign into your Microsoft account, but it can be still used to receive emails, etc.

Was this answer helpful?

1 person found this answer helpful.

0 additional answers

Sort by: Most helpful
Most helpful Newest Oldest

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.