Signs of a hacked account
- Unknown logins or devices in the account history
- Sent messages you did not write, or contacts receiving strange links
- Password or recovery address changed
- Unrequested password-reset notifications
- Mail-forwarding rules you did not create
What to do
- 1
From a clean device
If you suspect a virus, use another trusted device for what follows.
- 2
Change the password
Choose a long, unique password never used elsewhere.
- 3
Enable two-factor authentication
An authenticator app or security key is preferable to SMS.
- 4
Sign out all sessions
In security settings, close open sessions and remove unknown devices.
- 5
Check the settings
Forwarding rules, recovery address, connected apps, signature.
- 6
Warn your contacts
Tell them not to click links recently received from you.
Stop it happening again
- A unique password per account, managed by a password manager.
- Two-factor authentication on e-mail, social media and banking.
- Up-to-date devices and active antivirus.
- Phishing vigilance: never type credentials after clicking a link you received; go through the official site.
- Check your addresses on a data-breach lookup service (for example haveibeenpwned.com).
Need help? Our remote IT troubleshooting can guide you live. If the incident comes with fraud, also see online scams: the ten first moves.
