Xbox Account Recovery: How to Get Back In (2026 Guide)

Getting back into a lost Xbox profile means recovering the Microsoft account behind it: reset the password with a security code if you still reach your phone or backup email, or fill in Microsoft's online recovery form if you do not. Xbox recovery is not a separate system, so every step below runs through your Microsoft account, and the right route depends on which contact methods you can still use.

We checked every step here against Xbox Support's password reset, hacked account and "find your email" articles, plus Microsoft Support's recovery code page, in November 2026.

Pick the Right Recovery Route First

Most people waste their first hour on the wrong form. Xbox Support splits the problem into three situations, and each one has its own fix. If you know the sign-in email and can still receive a code at the phone number or alternate email on file, a normal password reset gets you in within minutes. If you know the email but every contact method is dead, you need the online account recovery form. If you do not even know which email your gamertag is tied to, you have to find that address first, because Xbox Support states plainly that it cannot give it to you, even if you know your gamertag.

• Know the email, can get a code: use Reset your password on the web or the I forgot my password button on the console sign-in screen.
• Know the email, cannot get a code: go straight to the Recover your account form.
• Do not know the email: work through the "Find your Microsoft account email address" steps first.
• Not sure what is wrong: Microsoft's Sign-in Helper asks for your email or phone number, checks the account for problems and tells you what to do next.

If the account is not lost but blocked, with a message such as "Help us secure your account," you are dealing with a lock rather than a lost password. That has a different, usually faster fix, which we cover in our guide to what to do when your Xbox account is locked.

Reset the Password From Your Console

You do not need a computer for a standard reset. As long as you can reach one of the security contacts you added in the past, the console handles the whole thing:

1. On the console Sign in screen, type your email address and select I forgot my password.
2. Type the characters shown on screen to prove you are not a robot.
3. On the Show that you're you screen, pick the phone number or alternate email where the code should go.
4. Enter the code on the Check your phone or Check your email screen. If you use an authenticator app, choose Use my authenticator app instead.
5. On Pick a password, type a new password, then retype it on the One more time screen.

Two details trip people up. First, if two-step verification is turned on, Xbox Support says you will need to request and enter a security code twice, using a different contact method each time, so have both your phone and your backup inbox ready. Second, Microsoft asks for passwords of at least 8 characters with a mix of upper and lowercase letters, numbers and symbols. If the reset works but you still cannot sign in, check the Xbox status page for service alerts before assuming the reset failed.

Use the Online Recovery Form When Codes Are Out of Reach

When the old phone number is gone and the backup email no longer exists, the Recover your account form is the only route Microsoft offers. Xbox Support is blunt about it: to protect customer privacy, Microsoft only verifies ownership through this online process, so phone agents cannot skip it for you.

1. Enter the email, phone or Skype name of the account you want back.
2. In Contact email address, enter a different inbox you can open right now. The reset link is sent there.
3. Answer the identity questions with whatever you remember from when the account was created or last updated.

The form rewards detail, so treat it like an exam you are allowed to over-answer:

• List every old password you can think of, even ones you are unsure about. The password field is case-sensitive.
• Use the address and name you had when the account was made, not your current ones, if you have since moved or changed your name.
• Submit from a computer you have used with this account before.
• Remember regional domains: an account created in Sweden would be hotmail.co.se rather than hotmail.com.
• For the Xbox questions, gamertag answers are not case-sensitive, and you can name the console the account was used on most.
• Console IDs and device IDs can be found in console settings even when you are not signed in.

After you submit, Microsoft emails a confirmation and then a response within 24 hours. If you hit the limit on recovery requests, you have to wait 24 hours before trying again, and the password reset link expires 72 hours after it arrives, so check spam and junk folders while you wait. If the reply says there was not enough information, you can submit again with new details. That is why knowing roughly how old your Xbox account is helps: the creation period shapes which passwords, addresses and devices you should list.

When You Forgot Which Email Runs Your Profile

Plenty of players set up a gamertag years ago with an address they no longer use. Before you can reset anything, you need that email. Xbox Support lists several ways to find it without contacting anyone:

• On a console where you are still signed in: your gamertag, name and sign-in email rotate in the upper-left corner of Home. If the email is hidden, go to Profile & system > Settings > Account > Sign-in, security & PIN and turn on Show on Home.
• On a console where you are not signed in: go to Profile & system > Add or switch > Add new > Forgot your account? and enter a phone number or alternate email you think is linked.
• Through a family group: an organizer can open the Xbox Family Settings app, choose the member and read the Account email under the Info bubble.
• On the web: try signing in at xbox.com with each address you suspect, and search old inboxes for Xbox subscription or offer emails.

Once you have the address, return to the reset or the recovery form above. If the address you find is one you would rather stop using, our walkthrough on changing the email on an Xbox account shows how to swap in a new primary alias after you are back in.

When a Hacker Changed the Password

A stolen account follows the same path, but with extra steps after you get in. Xbox Support says you can recover your account even if a hacker changed the password, because you never need the current password to reset it. If none of the contact options work, choose I don't have any of these on the We need to verify your identity screen to reach the recovery form.

If the form fails, or no email arrives within 24 hours, you contact Xbox Support. They will ask for the device ID and serial number of the console you use most, the email you are trying to recover, an alternative phone number, and a brand new Microsoft account with no gamertag attached, which is used only for secure communication during the case. Xbox Support says to use only a phone number as that new account's recovery option, because your other inboxes might also be compromised, and not to use it on a console or on Xbox.com until support tells you to.

Recovered accounts sometimes come back with damage. An attacker can earn enforcement actions on your profile while they hold it, and Xbox Support notes that the profile owner is responsible for how the profile is used. If anything looks off after you regain access, read our explainer on checking an Xbox account's ban status before you jump back into multiplayer.

Lock It Down Once You Are Back In

Recovery is only half the job. The steps Xbox Support recommends after a reset are worth doing the same day:

1. Add security info. Xbox requires two security contact options, at least one a phone number or email, and recommends one of each.
2. Under Security, open Sign-in activity and select View my activity. Mark any sign-in you do not recognize as This wasn't me.
3. Check the Account alias section under Your info and remove any alias you did not add.
4. Review Order history, Payment options and Subscriptions in Payment & billing, and remove any card you did not add.
5. Generate a recovery code on the Manage how I sign in page and store it somewhere offline. Microsoft warns that creating a new code invalidates every previous one.

If you created the account with a non-Microsoft email address, update the security on that email provider too, or the attacker may walk right back in through the inbox.

Starting Over With a Different Account

Some recoveries simply fail, and Xbox Support itself suggests creating a new account at that point. If you would rather begin again with an older gamertag or an established profile, the store's Xbox accounts page shows listings from marketplace sellers, such as short gamertags and profiles with games or Gamerscore attached; titles and stock change daily. Before you consider one, know that the Microsoft Services Agreement says you cannot transfer your Microsoft account credentials to another user or entity, and Xbox's account theft rules treat buying or selling accounts as a violation.

Frequently Asked Questions