What to Do if Your OneDrive Account Has Been Hacked
Question details
The user suspects their OneDrive account is compromised and needs actionable steps to secure the account and recover access.

- Product
- Microsoft OneDrive
- Device & OS
- not provided
- Scenario
- The user noticed suspicious activity, unauthorized changes to files, or is suddenly unable to sign into their OneDrive account.
- Observed behavior
- Potential unauthorized account access, altered sharing settings, missing files, or a completely blocked sign-in process.
Before attempting recovery, check if you can still access your Microsoft account through other services like Outlook or Office online, and gather any recent security notification emails you may have received.
Secure and Recover Your Microsoft Account
Use Microsoft's official security and recovery tools to regain access and secure your compromised OneDrive account.
Because OneDrive is linked directly to your Microsoft account, a hacked OneDrive means your entire Microsoft account is at risk. Your exact recovery steps will depend on whether you are completely locked out or can still log in.
Try signing in to OneDrive or your Microsoft account online. If you can still access it, immediately go to your account settings and change your password to a strong, unique alternative.
Navigate to the Security page of your Microsoft account dashboard. Check the 'Recent activity' section to identify any unauthorized login locations or unknown devices.
If your password was changed by a hacker and you cannot sign in, go to the Microsoft Support website, select 'I can't sign in to my Microsoft account,' and follow the automated recovery prompts.
If the automated recovery form fails, contact Microsoft Support directly. Be prepared to specify whether your account is a personal Microsoft account or a work/school account, as the recovery procedures differ.

Try WPS Office for Secure Document Management
If you are temporarily locked out of your Microsoft account and need immediate access to create or edit documents, WPS Office offers a free, lightweight, and highly compatible alternative to Microsoft Office. It provides robust local editing and independent cloud storage to keep your workflow uninterrupted.
- 1. Download WPS Office: Visit the official WPS website to download the free office suite installer for your device.
- 2. Install the software: Run the setup file and follow the quick on-screen instructions to install WPS Office.
- 3. Edit your documents locally: Launch WPS Office to open, edit, and save your existing Office documents directly on your local drive without needing a Microsoft account.

Frequently Asked Questions
How can I tell if my OneDrive account has been hacked?
Common signs of a hacked account include an inability to sign in with your known password, files being deleted or modified without your knowledge, unknown devices linked to your account in the security dashboard, or receiving unexpected password reset emails.
Can I recover deleted files from a hacked OneDrive?
Yes. If a hacker deleted your files, you can usually restore them from the OneDrive Recycle Bin within 30 days for personal accounts, or 93 days for work and school accounts, provided the bin wasn't permanently emptied.
Should I unlink my devices if my account is compromised?
Yes. If you suspect a breach, you should sign out of all devices via your Microsoft account security dashboard. This forces all connected devices to authenticate again, cutting off the hacker's access.
Can a community support forum recover my hacked account?
No. Microsoft Community moderators and independent advisors do not have the necessary backend access to user data or security settings. You must use the official Microsoft account recovery form to regain access.




