Emergency Help
I Think My Account Was Hacked
A calm, step-by-step triage. Answer a couple of questions and get the exact next move for your situation.
Take a breath. Most account compromises are completely recoverable, and moving in the right order matters more than moving fast. Answer the questions below and we'll point you to the exact next step.
How to recover a hacked account
The core recovery steps, in the order that actually protects you.
- Secure your primary email first — change its password and turn on two-factor authentication.
- Sign out all other sessions and remove any forwarding rules or connected apps you don't recognise.
- Reset passwords on your most sensitive accounts next: password manager, then banking.
- Turn on app-based or hardware-key 2FA everywhere it's offered.
- Warn your contacts that recent messages from you may be fake.
- Check which accounts appear in known breaches and prioritise those.
Frequently asked questions
What should I secure first if several accounts might be affected?
Your primary email. It's the password-reset hub for almost everything else, so if an attacker controls it they can walk into your other accounts. Lock email down before anything else.
The alert told me to click a link to secure my account. Should I?
No. Warnings that arrive with a link are a common phishing tactic. Open your account by typing the address yourself or using your bookmark, then check its security settings from there.
Is SMS two-factor good enough?
It's far better than nothing, but SMS codes can be intercepted or SIM-swapped. Where you can, use an authenticator app or a hardware security key instead, especially for email and banking.
How do I know if the hacker still has access after I change my password?
Changing the password isn't enough on its own. Also sign out all other sessions, and delete any mail-forwarding rules, filters, or connected third-party apps you don't recognise — those let an attacker stay in after a password change.
This is general guidance for common situations, not legal or financial advice. When large sums or physical safety are involved, contact your bank and local authorities directly.