How To Turn off Two-Step Authetication from a Hacked/Compromised Microsoft Account

Question

Going through the regular channels of the Microsoft Account Recovery Form, I cannot request a password reset due to the two-step verification for the compromised account in question. What do I do now?

Answer 1

Hi,

Thank you for sharing your question. I understand how stressful it is when an account has been hacked and the security process that should protect you instead becomes a barrier to recovering access. It is especially frustrating when the recovery form cannot proceed because all verification options tied to the account have been taken over or are no longer accessible.

This happens because Microsoft cannot turn off two‑step verification without proof of ownership, and when a hacker changes your recovery phone or email, the system can no longer validate that you are the real account owner. The only path forward is to use the Microsoft Account Recovery Form and provide as much detailed information as possible, such as old passwords, email subjects you’ve sent, Xbox console IDs, or billing information associated with the account. When the system can verify enough data, it allows you to reset your password and regain access, and once you sign in again, you can remove the hacker’s security information and turn off two‑step verification if you choose. If the recovery form continues to deny access, the account may still be secured by the attacker’s verification methods, and Microsoft Support cannot bypass those protections manually.

Before moving forward, may I ask whether you still have access to any devices, services, or apps that were previously signed in with that Microsoft account, such as Outlook, Xbox, Windows PC login, or Authenticator? I’m here to help you through this process step by step, so please feel free to follow up with any details and we can determine the best way to recover your account.”

 

I hope this helps.

 

Best Regards,

Noel