Managing personal Outlook.com account settings, security, and privacy
For a compromised personal Microsoft/Xbox account, support cannot manually restore access, send password reset links, or change account details. If two-step verification was turned on and the alternate verification methods are no longer accessible, there is no agent-assisted bypass.
What can still be done:
- Use the Sign-in Helper first if the current recovery options are not recognized.
- Submit the Account recovery form again using the original account details and a working contact email.
- Complete the form from a device and location previously used to sign in to that account, such as the usual home PC/network.
- Add as much exact information as possible:
- old passwords
- Outlook/Hotmail contact names and exact email subject lines
- Skype ID or contacts, if used
- Xbox console hardware ID from a console used frequently
- Check the working contact email, including spam/junk, for the recovery result. Microsoft states the result is sent within 24 hours.
- If the result says the account could not be verified, the form can be retried up to two times per day with more detail.
About the message that the account does not exist: if the original sign-in email was changed during the compromise, that message can appear. The documented path is still to use the recovery process with the original account information and, if standard reset options are not recognized, use the Sign-in Helper.
If access is regained, immediately run a full malware scan on the PC before changing the password, then review connected accounts, forwarding, and automatic replies.