What to Do If Your Microsoft Account is Hacked: Recovery Guide
Question details
The user needs to regain access to and secure a Microsoft or Microsoft 365 account that has been subjected to unauthorized access or suspicious password changes.

- Product
- Microsoft Account
- Device & OS
- not provided
- Scenario
- Experiencing unauthorized access, suspicious sign-in attempts, or being locked out of an account due to an external party changing the password.
- Observed behavior
- The user is unable to log in, notices unexpected password changes, or detects unauthorized modifications to account recovery and billing information.
Ensure you attempt the account recovery process from a familiar device and location, such as your home network, to improve the chances of Microsoft verifying your identity successfully.
Use the Microsoft Account Recovery Form
Follow this method if your password was changed by an unauthorized person and you are completely locked out of your account.
The Microsoft account recovery form is designed to help you regain access when you cannot use your standard sign-in methods. It works by asking questions about your account that only you would know the answers to.
Open a web browser and navigate to https://account.live.com/acsr.
Enter the email address, phone number, or Skype name associated with the compromised account. Then, provide an alternate email address where Microsoft can contact you during the recovery process.
Fill out the form with as much accurate information as possible. Include past passwords, email subjects, or billing details if you have an active Microsoft 365 subscription.
Submit the form and wait up to 24 hours for Microsoft to review your request and send a password reset link to your alternate email address.

Secure Your Account After Regaining Access
Take these immediate actions once you are back in your account to prevent future unauthorized access.
Switch to WPS Office for a Secure, Independent Workflow
If your Microsoft account is compromised, you may lose access to cloud-dependent files and your Microsoft 365 subscription. WPS Office offers a powerful, free alternative that allows you to create, edit, and save documents locally without relying entirely on a cloud account. It provides robust compatibility with all standard office formats.
- 1. Download the installer: Visit the official WPS Office website and download the free installer for your operating system.
- 2. Install WPS Office: Run the setup file and follow the on-screen instructions to complete the fast installation process.
- 3. Open your files: Launch WPS Office and open your existing .docx, .xlsx, or .pptx files seamlessly, bypassing the need for a Microsoft 365 login.

Frequently Asked Questions
Can I recover my Microsoft account if the hacker changed the backup email?
Yes, you can still use the Microsoft account recovery form (account.live.com/acsr). You will be prompted to provide a new, accessible email address where Microsoft can contact you, and you must answer detailed security questions to verify your identity.
How long does the Microsoft account recovery process take?
Microsoft typically reviews account recovery requests within 24 hours. You will receive an email update regarding the status of your request at the contact email address you provided in the recovery form.
How can I check for unauthorized activity on my Microsoft account?
Once you have regained access, go to the Security dashboard of your Microsoft account and click on 'Sign-in activity'. This page displays a detailed log of when, where, and how your account has been accessed over the last 30 days.
Will a hacked Microsoft account affect my Microsoft 365 subscription?
Yes, if an unauthorized user gains access to your Microsoft account, they could access your OneDrive files, utilize your Microsoft 365 software, or make unauthorized purchases using your saved payment methods. It is critical to review your 'Payment & billing' section immediately after recovering the account.




