How Long Can You Recover a Deleted Email in Exchange Online?

A deleted email in Exchange Online can be recovered for 14 days by default. An admin can stretch that to 30 days, no further. On day 31, with no hold or backup in place, the message is gone on Microsoft’s side too.

Most people never test this number. It comes up when a finance manager asks where last month’s pricing thread went, and the answer is rarely welcome.

Where does a deleted email go?

Deleting is a three-step path, not one action.

1. Deleted Items folder. Pressing Delete lands the message here. There is no time limit unless someone empties the folder or a retention tag does.
2. Recoverable Items, Deletions subfolder. Emptying Deleted Items, or using Shift+Delete, moves the message here. Users see it through “Recover deleted items” in Outlook. Default retention: 14 days.
3. Purges subfolder. If the user also deletes the item from the recovery window, it moves here. The user can no longer see it, but with single item recovery enabled (the default for new Exchange Online mailboxes) an admin still can.

When the retention period ends, the item is removed from Exchange Online and the recovery path closes.

What is recoverable, by whom, and for how long?

Situation	Who recovers it	Window
In the Deleted Items folder	User	Until emptied
Recover Deleted Items (Deletions)	User	14 days (30 max)
User purged it from the recovery window (Purges)	Admin only	Same 14 / 30 days
Litigation Hold enabled	Admin (eDiscovery)	Until the hold is removed
Calendar items	Admin	120 days

Extending the window is free and one line: Set-Mailbox -Identity [email protected] -RetainDeletedItemsFor 30. It has to be applied to every mailbox, and newly created ones start at 14 again. On a new client I treat this as a first-week task, since it costs nothing.

How does a user restore it on their own?

In Outlook, right-click Deleted Items and choose “Recover deleted items from this folder”. Outlook on the web has the same command. Select the messages and restore them. No IT ticket needed, so showing users this once genuinely reduces the request count.

The admin route is heavier. In the Exchange admin center, select the mailbox and choose “Recover deleted items”, or use Get-RecoverableItems and Restore-RecoverableItems in PowerShell. You need the Mailbox Import Export role, which in many tenants nobody has assigned yet. Finding out during an incident wastes time.

What does Litigation Hold change?

Placing a mailbox on Litigation Hold (or In-Place Hold) stops Exchange from purging deleted and modified items when the retention period ends. The Recoverable Items quota also rises from 30 GB to 100 GB (warning threshold from 20 GB to 90 GB). If a held user edits a message, the original copy is kept in the Versions subfolder.

That makes a hold look like a backup. It isn’t one. A hold is a legal preservation tool. If a user deletes a folder they created themselves (default folders like Inbox are exempt), the folder is hard deleted and does not come back even under hold. The messages inside can be recovered, but the folder structure is lost.

When do you need a real backup?

Built-in protection falls short when:

• The deletion is older than 30 days
• A user account was deleted and its recovery window has passed
• Ransomware or a compromised account bulk-deleted mail and nobody noticed in time
• You need the folder structure back as a whole

In the shared responsibility model Microsoft keeps the service running, while recoverability of your data largely sits with you. A separate Microsoft 365 backup gives you point-in-time restores. Decide what gets backed up and for how long, in writing; our Microsoft 365 backup article covers the details.

FAQ

Can I get an email back after 20 days?

Yes if you raised retention to 30 days. Not with the 14-day default, unless you have a hold or a backup.

Can an admin reach mail a user deliberately purged?

As long as single item recovery is on and the window hasn’t expired, yes. The item sits in Purges and an admin with the Mailbox Import Export role can restore it.

Why does Deleted Items keep emptying itself?

Usually a retention tag or an Outlook “empty on exit” setting. The items move to Deletions at that moment, which means the 14-day clock has already started.

What happens to a departed employee’s mailbox?

After you remove the license and delete the account, the mailbox can typically be restored for 30 days, then it is gone. Converting it to a shared mailbox or archiving it is the safer way to handle leavers.

If you don’t know what these values are in your tenant, one command answers it in seconds: Get-Mailbox | fl RetainDeletedItemsFor, SingleItemRecoveryEnabled. For a settings review or a backup design, get in touch.