Cybersecurity · Recovery
Recover a hacked account
Regain control and stop the attacker from returning.
9 min read · General educational guidance
- Use the service’s official recovery page from a trusted device and change the password.
- Sign out other sessions, remove unknown recovery addresses, apps and forwarding rules.
- Secure the linked email account, enable two-factor authentication and warn affected contacts.
Practical example
After recovering email, review recent sign-ins, remove unknown forwarding rules and recovery addresses, revoke unfamiliar app access, change reused passwords, then contact anyone who received scam messages from the account.
Common mistakes to avoid
- Changing only the password while leaving the attacker’s session or forwarding rule active.
- Using a link in the attacker’s warning message instead of the service’s official recovery page.
- Deleting evidence before recording dates, messages and unauthorized transactions.
Trusted sources and next reading
If money, identity documents or a work system may be affected, preserve evidence and contact the relevant bank, employer or authority quickly.