What should I do if my email account is hacked?
Short answer
Reset the password from a clean device, sign out all other sessions, turn on multi-factor authentication, and check that the recovery phone, recovery email and forwarding rules have not been changed. Then warn your contacts, because attackers often use a hacked account to scam them.
The details
If you cannot sign in, use the provider’s official account recovery process; do not trust anyone who contacts you offering to recover it. Once back in, review sent mail and connected apps, and change the passwords of other accounts that use this email for resets.
What to do
- Recover the account through the official recovery page.
- Change the password and sign out of all sessions.
- Enable MFA and update recovery details.
- Remove unknown forwarding rules, filters and connected apps.
- Tell your contacts to ignore unusual messages from you.
Terms explained
- Account takeover
- Account takeover is when a criminal gains control of someone else’s online account, usually with a stolen or reused password, a phished one-time code or a hijacked session.
- Multi-factor authentication
- Multi-factor authentication (MFA) requires two or more kinds of proof to sign in, such as a password plus an app prompt, security key or biometric unlock of a passkey.
Sources
Related questions
Related Guides
GuidePersonal Security
10 Ways to Keep Your Funds Safe on a Crypto Exchange After the Binance Hack Reports
Binance is investigating a suspected hot wallet hack. Here are 10 practical steps to protect crypto held on any exchange: account security, withdrawal limits, self-custody and scam awareness.
Read more GuidePersonal Security
7 Signs Your Account Has Been Hacked (and How to Fix It)
Spot the warning signs your account has been hacked, learn immediate containment steps, and restore your digital security with practical defensive advice.
Read more GuidePersonal Security
5 Signs Your Phone May Be Hacked
Learn 5 signs your phone may be hacked, the innocent explanations, and how to check your Android or iPhone, secure your accounts and recover safely.
Read more GuidePersonal Security
How to Turn On MFA for Your Most Important Accounts
Learn how to turn on MFA across your email, financial, and business accounts. Follow practical steps to configure authenticator apps and passkeys securely.
Read more