How to Recover a Hacked Email Account

Step by step

1. 5 min

   Attempt account recovery from a trusted device

   Navigate to your email provider's sign-in page and click 'Forgot password' or 'Can't access your account.' Enter your email address and follow the recovery prompts. Check for recovery emails on alternate email addresses or SMS messages on your registered phone number.

   Note: Use a device you've previously used to access the account, as providers often recognize trusted devices and offer simplified recovery options.
2. 10 min

   Contact your email provider's support team

   If automated recovery fails, contact customer support through their official website or phone line. Provide account details like your full name, alternate email addresses, recent emails sent, and account creation date. Request manual account verification and password reset.

   Note: Screenshot your account settings and recent emails before the hack as proof of ownership for faster support resolution.
3. 3 min

   Change your password immediately

   Once you regain access, create a strong, unique password with at least 12 characters including uppercase letters, numbers, and symbols. Avoid using personal information or previously used passwords. Update the password immediately through your account security settings.

   Note: Use a password manager to generate and store a complex password that you won't need to remember manually.
4. 5 min

   Enable two-factor authentication

   Go to your account security settings and enable two-factor authentication using your mobile phone number or authenticator app. Choose app-based authentication over SMS when available for stronger security. Complete the verification process and save backup codes.

   Note: Print and store backup authentication codes in a secure physical location in case you lose access to your primary 2FA device.
5. 5 min

   Review and revoke suspicious account access

   Navigate to your account's security or privacy settings and check recent login activity. Look for unfamiliar IP addresses, locations, or device types. Revoke access for any suspicious sessions and devices you don't recognize.

6. 5 min

   Check and restore email settings

   Review your email forwarding rules, filters, and signature settings for malicious changes. Delete any unauthorized email forwarding addresses and suspicious filters. Check your sent folder for emails you didn't send and warn affected contacts about potential phishing attempts.

   Note: Export a backup of legitimate email rules before making changes so you can restore them if needed.
7. 10 min

   Update linked accounts and services

   Identify all services connected to your email account including social media, banking, and shopping sites. Change passwords for these accounts immediately, prioritizing financial and sensitive services first. Remove your compromised email from any services you no longer use.

   Note: Use your browser's saved passwords list to quickly identify accounts that may be linked to your compromised email address.
8. 15 min

   Scan devices for malware

   Run full antivirus scans on all devices that accessed the compromised account. Update your antivirus software and operating system before scanning. Remove any detected threats and consider using a dedicated anti-malware tool for thorough cleaning.

   Note: Boot from a rescue disk or USB drive to scan for rootkits and advanced malware that might hide from standard antivirus scans.