A tool for managing user identities, credentials, and access across on-premises and cloud environments
For a personal Microsoft account, there is no manual override path where support staff can verify ownership and hand the account back directly. Account recovery is handled through the official automated recovery and sign-in flows, and support agents are not allowed to send password reset links or access or change account details.
The supported path is:
- Start with the Sign-in Helper for hacked accounts. It can guide to the available self-help options or offer the chance to talk to an agent for supported account-help scenarios.
- If the account is locked for suspicious activity and the sign-in page does not show Next, use the aka.ms/ link shown in that window and submit the reinstatement request. After submission, wait for the Microsoft Online Safety review email and do not submit additional requests, because repeated submissions can slow the response.
- If recovery form attempts keep failing, submit the form from a device, browser, and location previously used with the account if possible. Microsoft specifically recommends using a recognized device and location.
- Include as much exact historical information as possible in the recovery form: older passwords, exact Outlook subject lines, contacts, Skype details, Xbox console hardware ID, and other account-specific history.
- Use a working email address that can receive the recovery response.
- If two-step verification is enabled and none of the alternate verification methods are accessible, the recovery form cannot be used to regain access.
- If verification attempts are being blocked, avoid repeated retries. Try another verification method on the account, try another network, and wait at least 24 hours; in some cases waiting longer, up to 1 week, is recommended.
If the account was hacked, first run a full malware scan on the PC before changing or resetting the password. On Windows 8.1 and Windows 10/11, Windows Defender is available for malware protection. After that, if access is restored, change the password and review connected accounts, forwarding, and automatic replies.