How to Recover a Hacked Minecraft Account (And Protect It)

To recover a hacked Minecraft account, start with Microsoft account recovery, because Minecraft logins now run on Microsoft accounts. If that stalls, contact Minecraft/Mojang support with your proof of purchase. Once you're back in, turn on two-factor authentication and never share your password or a verification code.

My account got hacked, what do I do first?

Move fast, but in the right order. The one fact that changes everything: Minecraft logins now run on Microsoft accounts. So almost everything starts there, not in the game.

Do these first:

1. Try to sign in at account.microsoft.com.
2. If your password still works, change it now and sign out of all devices.
3. Turn on two-factor authentication right away.
4. Dig up your proof of purchase, meaning the receipt or order email from when the game was bought.

Can't sign in at all? The attacker probably changed your email or password already. That's the next section.

How do I recover through Microsoft?

Your Minecraft login is a Microsoft account, so recovery runs through Microsoft, even if the attacker swapped your email. Microsoft has a recovery form built for exactly this.

Here's the path:

1. Open Microsoft's account recovery page and pick "I can't sign in."
2. Enter the email or phone number that was on the account.
3. Fill the form with everything you can remember: old passwords, devices you've used, your location.
4. If you set up 2FA before the hack, use your backup code or authenticator to get straight back in.

More accurate details mean better odds. An account that already had 2FA on is far easier to recover. That's the whole reason to set it up early.

How do I contact Minecraft support with proof?

If Microsoft recovery stalls, go straight to Minecraft/Mojang support. The key fact: Mojang can restore an account to its original purchaser using the receipt. Your proof of purchase is your best evidence.

What "proof of purchase" usually means:

• The order confirmation email from when the game was bought.
• The transaction ID or receipt number.
• The original email the account was created with.

Open a ticket, say plainly that the account was stolen, and attach your receipt. Be patient and answer every follow-up they send.

This is also why you never delete that purchase email. It's the one document that proves the account is yours. If the account holds a name you care about, it helps to know what's actually at stake; you can check what a name is worth on /estimate before you panic.

Why do rare-name accounts get targeted?

Hackers don't pick targets at random. Accounts holding scarce names or capes are prime targets, because those things have real demand and can be flipped for money.

Here's what looks juicy to a thief:

• Short "OG" names, like clean 3-letter or 4-letter handles.
• Rare capes from old events or the migration, which carry real demand.
• Well-known names people already search for.

One honest note: most public prices for names are asking prices, not confirmed sales. A listing screaming a huge number doesn't mean it sold for that. Even so, the demand alone is enough to make these accounts a target.

You can sanity-check what's actually scarce on the public price index at /market. Capes specifically are covered in are Minecraft capes worth money.

How do I lock it down with 2FA and good habits?

Once you're back in, the goal is simple: make sure this never happens again. Two-factor authentication is the strongest protection you can add. It means a stolen password by itself isn't enough to get in.

Lock it down like this:

• Turn on 2FA through your Microsoft account, ideally with an authenticator app.
• Save your backup codes somewhere safe and offline.
• Use a long, unique password you don't reuse anywhere else.
• Sign out of old or shared devices.
• Keep that purchase receipt forever.

A quick reality check: nothing makes you bulletproof. But 2FA plus a unique password blocks the vast majority of takeovers. If you ever switch handles later, do it safely; here's how to change your Minecraft name.

Why should I never share passwords or codes?

Most "hacked" accounts weren't cracked by clever code. They were handed over by the owner who didn't realize it. Never share your password or a verification code with anyone. That's the most common attack in this whole scene.

How the trick usually plays out:

• Someone messages you pretending to be staff, a "buyer," or a friend.
• They ask you to "verify" by reading them a code or signing into a fake site.
• The second you share it, they're in, and your name or cape is gone.

The real rule: no legit person ever needs your verification code. Microsoft won't ask. Mojang won't ask. A real trader won't ask. If anyone does, that's the scam.

For the full playbook on these tricks, read how to avoid Minecraft name scams. And if you're worried a stolen account could come back to bite a buyer, see can Mojang take back an account after you buy it.