Account Security Problems

How to Recover a Hacked Microsoft Account with Unauthorized MFA Enabled

Adam Davis Oct 9, 2026 869 views

Question details

The user needs to recover a Microsoft account that has been compromised by an attacker who changed the password, deleted recovery information, and enabled an unauthorized authenticator method.

How to Recover a Hacked Microsoft Account with Unauthorized MFA Enabled

Product: Microsoft Account
Device & OS: not provided
Scenario: The user is attempting to regain access to their account after receiving security notifications regarding unauthorized credential and MFA changes.
Observed behavior: Normal sign-in attempts and security information updates are completely blocked because the attacker's newly added multi-factor authentication intercepts the verification process.

Before you start

Immediately secure any bank accounts or credit cards associated with the compromised Microsoft account to prevent unauthorized purchases, and gather all possible proof of account ownership before starting the recovery process.

Solution 1Recommended

Use the Official Microsoft Account Recovery Form

Submit a detailed recovery request directly to Microsoft to prove your identity and bypass the unauthorized security changes.

When an attacker changes your password and adds their own authenticator app, the standard password reset options will no longer work. Your best option is to submit the official recovery form from a device and location you frequently used to access the account.

Navigate to the Recovery Page

Open a web browser on a recognized device and go to the Microsoft account recovery page (account.live.com/acsr).

Provide Contact Information

Enter the email address of the compromised account and provide a working, alternative email address where Microsoft can contact you regarding the recovery process.

Submit Identity Details

Fill out the form with as much accurate historical information as possible, including old passwords, recent email subjects, or Skype contacts, then submit your request.

Use the Official Microsoft Account Recovery Form

Review Timeframe: Microsoft typically reviews these manual recovery forms within 24 hours. Providing maximum detail significantly improves your chances of success.

Solution 2

Contact Microsoft Support for Blocked Verification

Reach out directly to the Microsoft support team if the automated recovery process is completely blocked by the attacker's authenticator app.

Solution 3

Secure Reused Passwords and Linked Services

Prevent the attacker from compromising your other digital accounts while you wait for Microsoft to restore your access.

Free Microsoft Office alternative

Continue Your Work with WPS Office While Recovering Your Account

Losing access to your Microsoft account shouldn't halt your productivity. While you wait for Microsoft Support to resolve your account security issues, WPS Office provides a free, lightweight, and highly compatible alternative that lets you create, edit, and save your documents locally without requiring a Microsoft login.

1. Download WPS Office: Visit the official WPS website and download the free installation package for your operating system.
2. Install the Software: Run the installer and follow the on-screen instructions to complete the setup in just a few minutes.
3. Open Your Files Natively: Launch WPS Office and directly open your existing .docx, .xlsx, or .pptx files to continue working immediately.

Free and lightweight alternative to Microsoft OfficeSeamlessly open, edit, and save Microsoft Word, Excel, and PowerPoint formats nativelySave documents locally to keep your files secure without relying on a cloud accountFamiliar user interface ensures zero learning curve and instant productivity

microsoft office alternative - wps office

Frequently Asked Questions

Can I manually bypass or remove the hacker's authenticator app?

No. Once an attacker enables an unauthorized authenticator app, you cannot bypass it manually. You must successfully complete Microsoft's official account recovery process to verify your identity and have their system remove the unauthorized MFA.

What should I do if my Microsoft account recovery request is rejected?

If the automated recovery form is rejected, try submitting it again from a recognized device (like a home computer) or IP address using more precise details. If it continues to fail, you must contact Microsoft Support directly via their contact page for manual assistance.

Will I lose my Microsoft 365 subscription or OneDrive files if my account is hacked?

Your files and active subscriptions remain tied to the account, but you will be unable to access them via the cloud until you recover the account. In the meantime, you can use software like WPS Office to work on any documents you already have saved locally on your hard drive.

Microsoft Office Security Issues