Think you've been hacked? Step-by-step recovery

Signs something's wrong

• Friends get strange messages "from you"
• Password reset emails you didn't ask for
• Sign-ins from places you've never been
• Money moved, or purchases you didn't make

Recovery steps

1. Use a clean device if you think your computer is infected.
2. Secure your email first. Change the password, then sign out of all other sessions (Google: Security → Your devices. Microsoft: Security → Sign out everywhere).
3. Turn on two-factor authentication.
4. Check your email settings: remove forwarding rules and filters you didn't create, and make sure the recovery phone and email are yours.
5. Change passwords for banking, shopping and social media, starting with anything that used the same password.
6. Tell your bank if money or cards are involved.
7. Warn your contacts that messages from you may be fake.
8. Scan your computer, or get it checked, so it doesn't happen again.

Can't get back in?

See Locked out of your account.