Recover your Microsoft account

An Outlook mailbox, an old Hotmail address, and an Xbox profile can all depend on the same personal Microsoft account. Start by identifying what the sign-in screen is asking for: a forgotten password, a security code, or an account-unlock check. These are separate problems with different routes.

This guide is for an account you own. If Windows itself is keeping you out, use the Windows lockout guide to distinguish the account password from a device PIN. An employer or school controls its own Microsoft accounts; its help desk, rather than the personal-account recovery form, handles those resets.

1. Reset the password when you can receive a code

Open Microsoft's forgotten-password instructions and follow the reset link from that article. Enter the email address, phone number, or Skype name used for the account. Check the spelling carefully, particularly for an old Hotmail address or a second Outlook account.

Choose a verification destination you still control. Microsoft may ask you to complete a masked email address or phone number before sending a code. That check is asking for an existing account detail, not inviting you to add a new recovery address. Read the destination before requesting another message.

Enter the code only in the Microsoft reset flow you opened. Once Microsoft accepts it, choose a new password that you do not use for another service. A password saved in a browser may still be the old one; update that entry after a successful sign-in rather than repeatedly submitting it.

2. Use the sign-in helper for a different error

If the account is not recognized, is locked, or offers verification details you cannot use, start with the sign-in helper linked in Microsoft's reset article. Follow the branch matching the actual message. A lock imposed for suspicious activity is not always solved by changing a password.

Keep a note of the precise error and which account identifier you entered. You can record the wording without recording a security code. When several family members use the same computer, verify which person owns the account before choosing a recovery option. Having access to the computer does not establish ownership of every account on it.

3. Prepare the recovery form if Microsoft offers it

The Microsoft account recovery form guidance explains how to supply information about an account when ordinary verification is unavailable. You need a working contact email where Microsoft can send the result. That address can differ from the mailbox you are trying to recover.

Gather details before submitting: passwords you previously used, the Microsoft services you used, and accurate information requested by the form. Outlook questions can concern contacts and exact subject lines. An Xbox user may be asked for identifying console information. Supply details from your own records; a plausible guess about someone else's account is not evidence.

Use a familiar device and usual location where possible. If the first attempt fails, improve the answers with information you can actually verify. Microsoft describes a limit of two submissions per day and says it responds to the contact address within 24 hours. Those are submission and response guidelines, not a promise that an account will be returned.

If you think someone else got in

Use the official helper when an unfamiliar recovery destination appears. Secure the email account that receives Microsoft recovery messages, and avoid acting through a message that threatens immediate deletion unless you pay. A person offering to override Microsoft's ownership checks is not an alternative recovery route.

Do not send anyone your recovery-form answers, passwords, or one-time codes. Information collected to prove ownership belongs in Microsoft's own flow. If a work account is involved, tell the organization which device or verification method you lost so its administrator can choose the appropriate reset.

After you regain access

If you use this account for Microsoft 365, login.com's Microsoft 365 entry-point and security guide helps you identify the correct sign-in route and review its security settings. Keep personal and organization-managed accounts distinct.

Review account security information and remove destinations you do not recognize after adding and verifying replacements. Check your mailbox for unexpected forwarding or changes, and revisit other Microsoft services that share the account. A successful Outlook sign-in is a useful check that you recovered the intended identity.

For the everyday sign-in route once recovery is complete, login.com's Outlook sign-in guide helps you return to the correct service. Store your password and recovery information separately enough that losing one phone will not make both unreachable. Test a backup method while you still have a working session.

Instructions checked against vendor guidance on 24 September 2026.