logo
search
Account Security Problems

What to Do if Your OneDrive Account Has Been Hacked

Emma BrownEmma Brown Sep 28, 2026 869 views

Question details

The user suspects their OneDrive account is compromised and needs actionable steps to secure the account and recover access.

What to Do if Your OneDrive Account Has Been Hacked
Product
Microsoft OneDrive
Device & OS
not provided
Scenario
The user noticed suspicious activity, unauthorized changes to files, or is suddenly unable to sign into their OneDrive account.
Observed behavior
Potential unauthorized account access, altered sharing settings, missing files, or a completely blocked sign-in process.
Before you start

Before attempting recovery, check if you can still access your Microsoft account through other services like Outlook or Office online, and gather any recent security notification emails you may have received.

Solution 1Recommended

Secure and Recover Your Microsoft Account

Use Microsoft's official security and recovery tools to regain access and secure your compromised OneDrive account.

Because OneDrive is linked directly to your Microsoft account, a hacked OneDrive means your entire Microsoft account is at risk. Your exact recovery steps will depend on whether you are completely locked out or can still log in.

1
Test your current login access

Try signing in to OneDrive or your Microsoft account online. If you can still access it, immediately go to your account settings and change your password to a strong, unique alternative.

2
Review recent account activity

Navigate to the Security page of your Microsoft account dashboard. Check the 'Recent activity' section to identify any unauthorized login locations or unknown devices.

3
Use the Microsoft recovery form

If your password was changed by a hacker and you cannot sign in, go to the Microsoft Support website, select 'I can't sign in to my Microsoft account,' and follow the automated recovery prompts.

4
Contact Microsoft Support

If the automated recovery form fails, contact Microsoft Support directly. Be prepared to specify whether your account is a personal Microsoft account or a work/school account, as the recovery procedures differ.

Secure and Recover Your Microsoft Account
Important Privacy Notice: Community forums and independent support agents do not have backend access to user data and cannot directly recover your Microsoft account. You must use the official Microsoft recovery channels.
Free Microsoft Office alternative

Try WPS Office for Secure Document Management

If you are temporarily locked out of your Microsoft account and need immediate access to create or edit documents, WPS Office offers a free, lightweight, and highly compatible alternative to Microsoft Office. It provides robust local editing and independent cloud storage to keep your workflow uninterrupted.

  1. 1. Download WPS Office: Visit the official WPS website to download the free office suite installer for your device.
  2. 2. Install the software: Run the setup file and follow the quick on-screen instructions to install WPS Office.
  3. 3. Edit your documents locally: Launch WPS Office to open, edit, and save your existing Office documents directly on your local drive without needing a Microsoft account.
Free and lightweight suite for Word, Excel, and PowerPoint alternatives.Highly compatible with Microsoft Office formats including DOCX, XLSX, and PPTX.Built-in secure cloud storage (WPS Cloud) with independent account security.Familiar user interface for a seamless transition during your account recovery.
microsoft office alternative - wps office

Frequently Asked Questions

How can I tell if my OneDrive account has been hacked?

Common signs of a hacked account include an inability to sign in with your known password, files being deleted or modified without your knowledge, unknown devices linked to your account in the security dashboard, or receiving unexpected password reset emails.

Can I recover deleted files from a hacked OneDrive?

Yes. If a hacker deleted your files, you can usually restore them from the OneDrive Recycle Bin within 30 days for personal accounts, or 93 days for work and school accounts, provided the bin wasn't permanently emptied.

Should I unlink my devices if my account is compromised?

Yes. If you suspect a breach, you should sign out of all devices via your Microsoft account security dashboard. This forces all connected devices to authenticate again, cutting off the hacker's access.

Can a community support forum recover my hacked account?

No. Microsoft Community moderators and independent advisors do not have the necessary backend access to user data or security settings. You must use the official Microsoft account recovery form to regain access.