3/29/2021 How to recover a hacked or compromised account SupportOffice All Microsoft Windows Products  Devices  Search  What's new Deals Buy Microsoft 365 Account & billing Sign in Microsoft account help Templates Overview and sign in help More support  Password reset and recovery

Forgot username

Security and verification codes

Compromised or locked accounts

Account locked

Unlock an account

Recover a hacked account

Emails from Microsoft

Microsoft texts

Account activity and closed accounts

Linked accounts

About Microsoft accounts

Microsoft account profile

How to recover a hacked or compromised Microsoft account

Microsoft account

× Was this information helpful? Yes No There are two reasons you might think your account has been hacked. https://support.microsoft.com/en-us/account-billing/how-to-recover-a-hacked-or-compromised-microsoft-account-24ca907d-bcdf-a44b-4656-47f0cd89c… 1/7 3/29/2021 How to recover a hacked or compromised Microsoft account

You may have received a message from Microsoft that says, “Help us secure your account”. That means we have seen some activity on your account that is out of the ordinary enough for us to take measures to lock down your account until you can take action.

You have seen activity such as unauthorized charges, spam being sent to your contact list, unrecognized names in your file sharing, etc.

If neither of those sounds like your situation, please visit When you can’t sign in to your Microsoft account.

Follow these steps in order to help you take back control of your Microsoft account.

1. Change your Microsoft account password

2. Check sign in activity for sign ins that weren’t you

3. Review your account settings

4. Protect your other online accounts

5. Protect your Microsoft account for the future

Note: Xbox customers will find a solution customized to the way you interact with your console and account on Xbox Compromised Account Solution.

1. Change your Microsoft account password

The first thing you’ll want to do to protect your account is to change your password.

1. Go to Recover your account and type in the email address, phone number, or name you use to sign in. Then select Next. × 2. We'll ask where you'dWas thislike toinformation get your securityhelpful? code. SelectYes Next No. https://support.microsoft.com/en-us/account-billing/how-to-recover-a-hacked-or-compromised-microsoft-account-24ca907d-bcdf-a44b-4656-47f0cd89c… 2/7 3/29/2021 How to recover a hacked or compromised Microsoft account

3. Type the requested information and select Send code.

4. Type the security code into Verify your identity, then select Next.

5. Type in your New password. Then confirm it by typing it again into the Re-enter password field.

If you are unable to change your password using a security code to your contact information, complete the recovery form. Here are some tips you can use to fill out the form.

Note: For the protection of your account, we have strict policies on how our advocates can help you with your account. Microsoft Support advocates are not able to reset your password provide account information without proper validation or make any changes to your account security on your behalf. Only you can reset your password and make security changes to your account.

Steps to take if I can't verify that I own the account

We recommend that you try again, up to two times per day. You may find more information or have remembered something that will help.

You can always create a new account if you’re having trouble with the recovery request and try again later when you remember something new that might help. 2. Check sign in activity for sign ins that weren’t you

After signing in, you’ll want to review the recent activity on your account. If you see any account activity that looks unfamiliar, select This wasn’t me, and we’ll help you change your password if you haven’t already done so.

Note: Location is based on IP address and is approximate to protect your privacy. Look for consistency rather than exactness of location.

1. Go to Security > Sign-in activity > View my activity

× 2. Because of the sensitivityWas this of information this information, helpful? we’ll needYes to verify No your identity with a security code. On the Protect your account screen, select the method by which you’d like https://support.microsoft.com/en-us/account-billing/how-to-recover-a-hacked-or-compromised-microsoft-account-24ca907d-bcdf-a44b-4656-47f0cd89c… 3/7 3/29/2021 How to recover a hacked or compromised Microsoft account to receive this code, then select Send code.

3. On the Enter code screen, enter the security code you receive.

4. Review the recent sign-in activity on your account. If you see any successful sign-in that you do not recognize, run a scan with your security software and remove any malware you find. Then change your password again.

3. Review your Microsoft account settings

Check Security Contact Info: Remove any security contact information the attacker might have added.

1. On the Security page, select the Update info button. If you're not already signed in to your Microsoft account, you'll be prompted to sign in.

2. You may be asked to enter a verification code to continue. If you don't have access to your alternate email or phone number, choose I don't have any of these and follow the instructions to replace your security info.

3. You'll see your security info under Security settings. Choose Remove for any you want to remove. You may be asked to add new security info before you can remove the old info.

Update Outlook.com email settings: Sometimes attackers change your email settings so that they receive emails you send out, or they set up automatic replies for emails you receive. Because this is so common, Microsoft will reset these settings to the default options if we think your account was compromised.

1. Sign in to Outlook.com

2. Select the settings icon, then View all settings.

3. Review the following settings and remove any unfamiliar addresses or information that might have been added:

Connected accounts × Was this information helpful? Yes No https://support.microsoft.com/en-us/account-billing/how-to-recover-a-hacked-or-compromised-microsoft-account-24ca907d-bcdf-a44b-4656-47f0cd89cF di … 4/7 3/29/2021 How to recover a hacked or compromised Microsoft account Forwarding

Automatic replies

Rules

Remove OneDrive Sharing: Make sure an attacker didn’t give himself access to your files.

1. Sign in to OneDrive.

2. Select Shared on the left menu under OneDrive.

3. Review the folders and files that you're sharing to see if any have been added or removed.

Review Order History: Review Order history for unrecognized charges.

If you see charges you don’t remember making, check your apps and downloaded content to make sure someone in your family didn’t make the purchase.

If you do determine that the charge isn’t yours, see What to do about unexpected charges from Microsoft.

4. Protect your other online accounts

If an attacker had access to your username and password, they may have access to any other accounts where you used that account. Just to be safe, you should change your passwords on those other sites as well.

5. Protect your Microsoft account for the future

Take a look at our tips in Help protect your Microsoft account. We especially recommend you take a look at our Do’s and Don’ts for creating a strong password, and that you consider using two-step verification and the Microsoft Authenticator app to help strengthen your account security and to sign-in without passwords.

Adding additional security contact info can make it easier to recover your account if someone × else takes control of it,Was or thisyou informationforget your password.helpful? We neverYes use yourNo security contact info for marketing purposes—it’s only to verify your identity. https://support.microsoft.com/en-us/account-billing/how-to-recover-a-hacked-or-compromised-microsoft-account-24ca907d-bcdf-a44b-4656-47f0cd89c… 5/7 3/29/2021 g p p yHow to recovery y a hacked or compromisedy Microsoft account

Related articles

When you can't sign into your Microsoft account How to close your Microsoft account Keep your computer safe at home What to do about unexpected charges from Microsoft

Need more help?

How can we help you? 

Join the discussion Get support

ASK THE COMMUNITY  CONTACT US 

What's new Microsoft Education Enterprise Developer Company Store Microsoft in Azure Microsoft Visual Careers Account profile education Studio Go AppSource About Microsoft Download Center Office for Windows Dev X students Automotive Center Company news 2 support Office 365 for Government Developer Center Privacy at schools Microsoft 3 Returns Healthcare Microsoft Deals for developer Investors Microsoft 365 Order tracking students & Manufacturing program parents Diversity and Windows 10 apps Virtual workshops Financial services inclusion and training × HoloLens 2 Was this informationin education helpful?Retail Yes OfficeNo Dev Center Accessibility https://support.microsoft.com/en-us/account-billing/how-to-recover-a-hacked-or-compromised-microsoft-account-24ca907d-bcdf-a44b-4656-47f0cd89c… 6/7 3/29/2021 How to recover a hacked or compromised Microsoft account

Microsoft Store Microsoft Garage Security Promise

Financing

 English (United States) Sitemap Contact Microsoft Privacy Terms of use Trademarks Safety & eco About our ads © Microsoft 2021

× Was this information helpful? Yes No https://support.microsoft.com/en-us/account-billing/how-to-recover-a-hacked-or-compromised-microsoft-account-24ca907d-bcdf-a44b-4656-47f0cd89c… 7/7