Strange e-mails sent from your address, a password that suddenly doesn't work, or a sign-in alert you don't recognise? Work through these steps in order.
1. Get back in and change the password
Use a computer or phone you trust. If the password no longer works, use the provider's "forgot password" or account recovery. Choose a new password you have never used anywhere else.
2. Sign out everywhere
Most e-mail and social accounts have an option to sign out of all other devices. Use it, so whoever got in is thrown out.
3. Turn on two-step sign-in
With two-step sign-in, a stolen password alone is no longer enough to get in. It's the single most effective protection there is.
4. Check what was changed
Attackers often leave things behind so they can keep reading your mail. Check:
- Forwarding and filter rules (mail quietly copied or moved somewhere else)
- The recovery e-mail address and phone number
- Connected apps you don't recognise
- Sent mail you didn't write
5. Warn people and check your money
Let your contacts know not to trust recent messages from you, especially anything about payments. If the account is linked to banking or payments, check for transactions you don't recognise and call your bank.
6. Check the other accounts
If you used the same password anywhere else, change it there too. A password manager makes having a different password for every account easy.
If it's a business account, or you're not sure you got everything, we can secure the account, check what was touched, and show your team how to spot the next attempt.
Need a hand?
More about our business e-mail and domains help. Or tell us what's going on and we'll get back to you.
Send us a message or call (208) 745-2981, Monday to Friday, 9 to 5.