How-To
← All guidesSecurity & Privacy

What to Do If Your Email Account Is Hacked

Secure an email account that may have been accessed by someone else.

Quick Answer

Change the password from a trusted device, review recovery information, sessions, forwarding rules and filters, then enable 2FA.

Step by Step

  1. Use the official settings or website for the account, device, browser, or service involved.
  2. Change the password from a trusted device, review recovery information, sessions, forwarding rules and filters, then enable 2FA.
  3. Review security and recovery settings after making the change.
  4. Keep recovery information and backups somewhere you can access if the primary device is lost.

If That Doesn't Work

  • Never give an unsolicited caller or message sender your password, recovery code, or one-time verification code.
  • If money or a critical account is at risk, use a known official contact method rather than contact information supplied in the suspicious message.