How-To
← All guidesSecurity & Privacy

What to Do If an Online Account Is Hacked

Take immediate steps after unauthorized access to an email, social, shopping, or other account.

Quick Answer

Use a trusted device to change the password, sign out other sessions, secure recovery methods, and enable two-factor authentication.

Step by Step

  1. Use the official settings or website for the account, device, browser, or service involved.
  2. Use a trusted device to change the password, sign out other sessions, secure recovery methods, and enable two-factor authentication.
  3. Review security and recovery settings after making the change.
  4. Keep recovery information and backups somewhere you can access if the primary device is lost.

If That Doesn't Work

  • Never give an unsolicited caller or message sender your password, recovery code, or one-time verification code.
  • If money or a critical account is at risk, use a known official contact method rather than contact information supplied in the suspicious message.