What to Do When Your Email Account Is Hacked

Discovering that someone may have accessed your email account can be stressful, but acting quickly can limit the damage. Email is often connected to bank accounts, social media profiles, online shopping sites, work systems, and password-reset links. That makes it one of the most important accounts to secure.

The first step is to change your email password immediately. Use a strong, unique password that you have never used on another website. A good password should be long and difficult to guess. Consider using a password manager to create and store secure passwords instead of trying to remember them all yourself.

If you cannot log in because the attacker changed your password, use your provider’s account recovery process. Most email services have a “Forgot Password” or “Recover Account” option. Follow the instructions carefully and use only the official website or app. Do not click recovery links from random emails or text messages, since attackers may send fake alerts designed to steal even more information.

Once you regain access, review your account’s recent activity. Most major email providers allow you to see devices, locations, and recent sign-ins connected to your account. Look for unfamiliar devices, locations, browsers, or login attempts. Sign out of any sessions you do not recognize. It is also a good idea to sign out of all devices, then log back in only on devices you trust.

Next, check your account recovery settings. Attackers sometimes add their own recovery email address or phone number so they can regain access later. Remove anything you do not recognize and confirm that your recovery information belongs only to you. Also review your email forwarding rules, filters, and blocked-address settings. Criminals may create hidden forwarding rules that send copies of your messages to another account.

Enable multi-factor authentication as soon as possible. Multi-factor authentication adds another security step beyond your password, such as an approval prompt, authenticator-app code, or physical security key. Even if someone gets your password, this extra layer can make it much harder for them to access your account.

You should also check your sent mail, deleted mail, contacts, and drafts. Attackers may send scam messages to your contacts while pretending to be you. They may ask friends, family members, or coworkers for money, gift cards, login information, or urgent help. If suspicious messages were sent from your account, notify your contacts quickly so they know not to trust them.

Because email accounts are often used to reset passwords, review other important accounts connected to that email address. Start with banking, credit card, shopping, social media, cloud-storage, and workplace accounts. Change passwords anywhere you reused the same password. Watch financial accounts closely for suspicious activity and contact the institution directly if you see anything unusual.

Finally, run a security scan on the device you used to access your email. Malware, malicious browser extensions, or stolen passwords may have contributed to the compromise. Update your operating system, browser, antivirus software, and installed apps. Remove browser extensions you do not recognize or no longer use.

A hacked email account is serious, but fast action can help you regain control. Change your password, secure recovery settings, enable multi-factor authentication, and review connected accounts. Taking these steps now can help prevent a single email breach from becoming a much larger problem.