My business outlook email has been hacked and I cannot change my password.

Dear @Rodney Stouffer,

Thank you for posting your question in the Microsoft Q&A forum.

I understand how urgent and concerning it is when a business email account may have been compromised and you’re unable to change the password. Please know you’re not alone in this, and I’ll guide you through every step to get you back in control as quickly as possible.

Before giving you the best solution, could you please confirm these questions below to help me diagnose the issue more effectively: 

• Since you are using business account, are you the end-user or the admin in your tenant?
• Are you able to sign-in the account?
• Since you said you cannot change the password? What exact error message do you see when you try to change it?
• Could you please share a screenshot when attempting to change your password?

Based on Microsoft’s official guidance for business accounts, here are some steps I recommend you look through:

Step 1: Try changing the password via My security info

The following steps describe how to update a password in My Security Info. If you know your password and want to change it, see Change your work or school account password.

Step 2: Reset your Microsoft work or school account password

If you forgot your work or school password or have been locked out of your account, you can use your security info and your mobile device to reset your work or school password. For reference, please refer to Reset your Microsoft work or school account password using security info

Important: Your administrator must turn on this feature for you to be able to set up your information and reset your own password.

Step 3: Contact your IT Admin

If you cannot change the password and unable to sign-in and you are user or have other admins in your company, I recommend you contact your IT admin/Global admin to raise a request for resetting your password or your authentication method in the Entra admin center.

For step-by-step details, refer to the official Microsoft documentation: 

• Reset passwords in Microsoft 365 for business and Let users reset their own passwords
• Manage authentication methods for Microsoft Entra multifactor authentication - Microsoft Entra ID | Microsoft Learn  

Note: Please understand that as a forum moderator, my role is to provide general guidance and troubleshooting support. I don’t have access to internal systems or backend tools, and I appreciate your understanding of these limits.

I hope the information shared helps point you in the right direction. Please try the steps above and let me know if they work. If not, we can continue working together to narrow this down.

The first response may not always resolve the issue right away, but with your help and more details, we can work toward a solution.

Thank you for your patience and understanding. I'm looking forward for your reply.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".   

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

If your business Outlook email has been hacked and you're unable to change your password, here are some steps you can take:

1. Check Security Info: If you can sign in briefly, go to Microsoft Account Security and review your security information. Look for any unfamiliar phone numbers or email addresses and remove them.
2. Use the "I don’t have any of these" Option: If prompted for two-factor authentication (2FA) and you don't recognize the method, select this option if available. It may trigger an alternative recovery process.
3. Secure Your Devices: Run antivirus scans on your devices to ensure they are not compromised. Change passwords on other linked accounts as well.
4. Contact Microsoft Support: Since you suspect unauthorized access, reach out to Microsoft Support. Use the option for "I can’t sign in" to explain your situation and get assistance.
5. Monitor Your Account: Keep an eye on your account for any suspicious activity and consider enabling multi-factor authentication (MFA) if you haven't done so already. This adds an extra layer of security.

If you continue to face issues, you may need to fill out the account recovery form, but note that it may not bypass 2FA requirements.