Managing personal Outlook.com account settings, security, and privacy
The available recovery options are limited to Microsoft’s self-service account recovery process.
- If the account was compromised, start with the Microsoft Sign-in Helper tool for hacked accounts. It guides to the appropriate recovery path and may offer contact options when available.
- If access to the password and all security info is lost, submit the account recovery form again. Recovery attempts can be retried up to two times per day.
- When completing the recovery form, use a device previously used to sign in to the account and a familiar location such as home or office.
- If any security methods are still accessible, try to regain access to those first. If the password is known but some security info is still available, add a new sign-in or verification method from Advanced security options, confirm it, and then remove the inaccessible method. Do not change all security info at the same time, because the account may be restricted for 30 days.
- If the password is known but all security info is lost, begin sign-in, select I don't have any of these at the identity verification prompt, and follow the steps to replace the security info. After replacement, there is a 30-day wait before sign-in is allowed.
- If the account recovery form was already rejected, keep retrying with more accurate and complete information. Microsoft sends the result to the working email address entered in the form within 24 hours.
- Microsoft support agents are not allowed to send password reset links or access and change account details.
For the request to permanently suspend or close the compromised account, no supported path is provided here unless account access is first recovered. The documented actions focus on self-service recovery and securing the account after access is restored.
After regaining access, review recent activity on the Security basics page, report any sign-ins that were not recognized, change the password, run a full antivirus scan on the PC before changing the password, and check connected accounts, forwarding, and automatic replies for unauthorized changes.