Staying Safe Online · Backups & Bad Days · Lesson 4 of 5

What to Do If You Think You Were Hacked

The signs an account was taken over, and the steps to take it back.

Signs something is wrong

To be hacked means someone got into your account or computer without your permission. It happens to careful people too. It is not shameful, and it can almost always be fixed.

Here are common signs an account was hacked:

• Your password suddenly doesn't work, and you didn't change it.
• You get an email saying your password or recovery details were changed, and it wasn't you.
• You get a sign-in alert from a device or place you don't know. A sign-in alert is a message an account sends when someone signs in.
• Friends say they got strange messages from you, often with a link or a request for money.
• You see sent emails or posts you didn't write.

One warning. Scammers also send fake alerts to scare you into clicking. So don't click the link in an alert. Instead, open the website or app yourself, the way you normally would, and check there.

Can't sign in at all? On the real sign-in page, look for a link like Forgot password or Can't sign in. The company will help you prove the account is yours and get back in.

Spotting the signs early is the first step. Next, you will learn the steps to take, in order.

Take it back, step by step

Stay calm and go in this order. Each step builds on the one before.

1. Secure your email first. Your email is the key to your other accounts. Password reset links go there. So change your email password before anything else.
2. Change your other passwords. Start with the hacked account, then your bank and any account that used the same password. Give each one a new, different passphrase.
3. Turn on two-step verification. This asks for a code from your phone when someone signs in. A stolen password alone is no longer enough.
4. Sign out other sessions. A session is a device that is still signed in to your account. Most account settings have a button like "Sign out of all devices". This kicks the intruder out.
5. Run a scan. On Windows, open Windows Security and run a quick scan. It checks for harmful programs.
6. Tell your bank if money or card details may be involved. Use the number on the back of your card.
7. Report it. In the United States, you can report it at ReportFraud.ftc.gov. If someone is using your name, IdentityTheft.gov gives you a recovery plan.

Also check that your recovery email and phone number are still yours. Then let your friends know, so they ignore any strange messages.