A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
Use the official recovery path immediately:
- Start the Microsoft account hacked-account flow: Start. This guides to self-help steps or an agent option.
- Before changing anything, run a full malware scan on the PC from Windows Security:
- Open Windows Security
- Open Virus & threat protection
- Select Scan options > Full scan > Scan now
- After the scan completes, try to change the password if access is still possible from a signed-in session. If sign-in no longer works, use the password reset path in the hacked-account article.
- After access is restored, review account settings that attackers commonly change:
- connected accounts
- forwarding
- automatic replies
- If the account is blocked because of unusual activity, use the Outlook.com unblock flow: Sign-in Helper.
Important limits from Microsoft support:
- Account recovery is handled through the automated recovery process.
- Support agents are not allowed to send password reset links or access and change account details.
- If the recovery request is denied, it can be retried up to two times per day.
- If the recovery form cannot be used because the security information is no longer recognized, use the Sign-In Helper.
Since the attacker changed the sign-in information, the best supported path is the hacked-account recovery flow and Sign-In Helper rather than trying to prove ownership through unsupported evidence in a forum.