Recovery navigator

Xbox account recovery

The Grid Nexus does not recover accounts or request account credentials. Follow the official process.

1. 1. Use a clean device

   If malware is suspected, avoid signing in from the infected device until it is cleaned.

2. 2. Secure the Microsoft account email

   Confirm you still control the email address and enable its own two-factor authentication.

3. 3. Use Microsoft's official account-recovery form

   Submit Microsoft's account recovery form; do not trust third-party 'recovery agents'.

   Official recovery page ↗
4. 4. Turn on two-step verification or passwordless sign-in

   Enable Microsoft two-step verification (or go passwordless) so a stolen password alone cannot re-take the account.

   Official security page ↗
5. 5. Review devices and recent sign-ins

   Remove unfamiliar devices from your Microsoft account after regaining access.

Before you start

1. Secure your email first. Your email is the master key — if it's compromised, the attacker can reset every linked account. Change its password and enable 2FA before you recover anything else.
2. Use a clean, trusted device. If your PC or phone has an info-stealer, recovering on it hands the new password straight back to the attacker. Run a scan or use a second device.
3. Gather proof of ownership. Purchase receipts, original email addresses and an approximate sign-up date all help Xbox support verify you're the real owner.

What to expect

Recovery through Xbox's official support is always free. Self-serve steps above usually take minutes; a human identity review can take hours to days. Xbox will never ask for your password, 2FA codes or recovery codes — any "support" contact that does is a scam.

After you're back in

• Enable or reset two-factor authentication immediately.
• Sign out all other sessions and remove unknown devices.
• Remove saved payment methods until you're sure the account is secure.

Reviewed 2026-10-15 · Playbook v1