Getting locked out of your Microsoft account can be frustrating, especially when you need access to Outlook email, Xbox, or Windows services. This guide covers all recovery methods, from simple password resets to the full account recovery form for complex situations.
Start with the password reset page if you still have access to your backup email, phone, or authenticator app. Use the account recovery form only when those verification methods are unavailable or outdated.
| Situation | Best recovery path |
|---|---|
| You know the email and can receive a code | Standard password reset |
| You lost access to backup email or phone | Microsoft account recovery form |
| You still have Microsoft Authenticator | Reset through the authenticator flow |
| You see suspicious sign-ins or changed settings | Recover the account, then secure it immediately |
Method 1: Standard Password Reset
Use this method if you have access to your backup email or phone number.
- Go to account.live.com/password/reset.
- Enter your Microsoft account email address.
- Choose where Microsoft should send the verification code: backup email, text message, or phone call.
- Enter the security code you receive.
- Create a new password.
Tip: Your new password must be at least 8 characters and different from your previous password.
Method 2: Account Recovery Form
Use this method if you can't access your backup email or phone number. The recovery form lets you prove ownership through other information.
- Go to account.live.com/acsr.
- Enter the Microsoft account email address you are trying to recover.
- Enter a contact email where Microsoft can reach you. This must be different from the locked account.
- Complete the CAPTCHA.
- Fill out the recovery form with as much detail as possible.
Information That Helps Your Recovery Request
Provide as many of these as you can remember:
| Information Type | Examples |
|---|---|
| Previous passwords | Any passwords you've used on this account |
| Email details | Subject lines of recent emails you sent or received |
| Folder names | Custom folders you created in Outlook |
| Contacts | Email addresses in your address book |
| Microsoft products | Xbox Gamertag, Skype name, products purchased |
| Billing info | Last 4 digits of credit card used, purchase amounts |
| Account creation | When and where you created the account |
Processing time: Microsoft typically reviews requests within 24 hours. You'll receive a response at your contact email.
If you need a deeper walkthrough of the form itself, see how to use the Microsoft account recovery form.
Method 3: Using Microsoft Authenticator
If you have Microsoft Authenticator set up:
- Open Microsoft Authenticator on your phone
- Tap your Microsoft account
- Tap "I forgot my password" if available
- Follow the prompts to reset via the app
This method works because the app has already verified your identity.
Recovering a Hacked Account
If you suspect your account was compromised:
- Reset your password immediately using Method 1 or 2
- Go to account.live.com/Activity and look for sign-ins you do not recognize.
- Add a current phone number and backup email.
- Enable two-factor authentication or passkeys.
- Review email forwarding rules and inbox rules.
- Check connected apps and remove anything suspicious.
- Confirm your recovery email and phone number were not changed by the attacker.
For suspicious email or sign-in warnings, compare the message against Microsoft security alert scam indicators before clicking links.
What Businesses Should Check After Recovery
If this was a work account or a Microsoft 365 account used for business, treat recovery as the start of the investigation, not the end.
- Review Entra ID sign-in logs for unfamiliar countries, devices, and failed MFA attempts.
- Check mailbox forwarding, inbox rules, and delegated mailbox access.
- Reset exposed passwords on any reused accounts.
- Revoke suspicious sessions and connected applications.
- Confirm MFA, conditional access, and admin-role assignments are still correct.
Inventive HQ helps small businesses secure Microsoft 365 after account compromise, including mailbox rule review, MFA cleanup, and sign-in log triage. Contact us if the account belongs to your organization.
Tips for Successful Recovery
For the Recovery Form
- Be specific: Exact passwords are better than approximate ones
- Include details: More information increases approval chances
- Use a familiar device: Submit from a device you've used with the account
- Wait before resubmitting: If denied, wait 24 hours and provide more details
Common Reasons for Denial
- Information too vague or incorrect
- Using a new device Microsoft doesn't recognize
- Not enough account history to verify ownership
- Multiple failed attempts in a short period
Recovering Specific Microsoft Services
Xbox Account
Your Xbox account is your Microsoft account. Use the same recovery methods above. Your Gamertag can help verify ownership on the recovery form.
Outlook/Hotmail
Email details (sent messages, folder names, contacts) are valuable for the recovery form.
Windows PC
If you're locked out of Windows because of your Microsoft account:
- Use another device to reset your password
- Ensure your PC has internet connection
- Try your new password on the Windows lock screen
Preventing Future Lockouts
- Enable two-factor authentication: Adds security and recovery options
- Keep security info updated: Current phone number and backup email
- Set up Microsoft Authenticator: Provides an additional recovery method
- Save recovery codes: Store them securely when offered
- Use a password manager: Never forget your password again