Think Your Account Has Been Hacked? What to Do Right Now
Step-by-step recovery for hacked email, social media and shopping accounts, and how to stop it happening again.
Strange emails sent from your address, posts you didn't write, a password that suddenly doesn't work, or a login alert from somewhere you've never been: these are signs someone else may have access to your account. Act quickly and calmly. Most accounts can be recovered.
Step 1: if you can still log in, lock them out
- Change the password to a new, strong one you haven't used anywhere else (three random words works well; see our password guide).
- Sign out of all other sessions. Most services have an option like "Sign out of all devices" or a list of logged-in devices in their security settings.
- Turn on two-step verification so a password alone isn't enough.
Step 2: if you're locked out, use the official recovery
Go to the service's own website or app and choose "Forgotten password" or "Can't access your account". Google, Apple, Microsoft, Facebook, Instagram and others all have dedicated recovery processes for hacked accounts. Use the official help pages only.
Step 3: check what the hacker changed
Once you're back in, look through the security settings for anything you didn't set up:
- a recovery email address or phone number that isn't yours
- email forwarding rules or filters that send your mail elsewhere or delete it
- unknown devices, connected apps or "app passwords"
- changed delivery addresses or saved cards in shopping accounts
Remove anything suspicious.
Step 4: protect everything else
If it was your email that was hacked, treat this as urgent. Anyone with your email can reset other passwords. Change the passwords for your bank, Apple, Google or Microsoft account, Amazon and social media, starting with any that used the same password.
If you saved card details in a hacked shopping account, check your bank statements and tell your bank about any payments you don't recognise.
Step 5: warn your contacts
Hackers often message your friends with scams such as "I'm stuck, can you send money?" or "Is this you in this video?". Post or send a short message letting people know your account was compromised and asking them to ignore anything odd sent in the last few days.
Step 6: check your devices
Run a full scan with your security software (on Windows, Windows Security), update your phone and computer, and remove any apps or browser extensions you don't recognise.
How did it happen, and how to stop it happening again?
The most common causes are:
- Reused passwords leaked from a different website. Fix: one password per account, kept in a password manager.
- Phishing, where you entered your login on a fake page. Fix: always log in by typing the address or using the app (see our phishing guide).
- Sharing a login code. Fix: never share a code sent to you, even with someone claiming to be from the company or a friend.
Two-step verification blocks the large majority of account takeovers. If you only do one thing after reading this, turn it on for your email.