A tool for managing user identities, credentials, and access across on-premises and cloud environments
The fastest supported path is the Sign-in Helper for compromised accounts. It asks for the email address or phone number and then either shows the available self-help recovery path or offers the chance to talk to an agent.
Recommended order:
- Run a full malware scan on the PC first
- Open Windows Security.
- Go to Virus and threat protection.
- Select Scan options > Full scan > Scan now.
- Microsoft recommends doing this before changing or recovering the password.
- Start the hacked-account recovery flow
- Use the Start option in the hacked-account recovery article.
- Enter the original email address or phone number tied to the account.
- If the original email now says the account does not exist, use the Sign-in Helper path shown in the recovery guidance.
- If normal reset options fail, use the account recovery form guidance
- Microsoft says to try the Sign-in Helper first.
- The recovery form requires a working email account that can receive messages about the request.
- If possible, complete the form from a device and location previously used to sign in to that account.
- Important limitation for two-step verification
- If two-step verification was turned on and none of the alternate verification methods are accessible, Microsoft states that support agents cannot send password reset links or access and change account details.
- If two-step verification was not turned on and the listed verification email or phone is unrecognized, Microsoft directs users to the Sign-in Helper tool.
- How to reach a real support agent
- Go to Contact Microsoft Support, enter the problem, and select Get Help.
- If more help is needed, select Contact Support to be routed to the best support option.
- Microsoft also states that support agents are not allowed to send password reset links or change account details, so an agent can guide the process but cannot bypass account security.
- If access is regained, immediately review account settings
- Check connected accounts.
- Check forwarding.
- Check automatic replies.
- Then change the password to a strong one.
About Gmail vs Microsoft: they are separate account systems. Access to Gmail does not mean access to the Microsoft account.