What to Do After Your Email or Social Media Account Is Hacked

If your email or social media account has been hacked, act immediately: secure your device, change your password, and log out all other sessions. Then check for unauthorized changes, notify your contacts, and enable two-factor authentication to prevent it from happening again.

Immediate Steps to Regain Control

Your first priority is to get back into the account and lock the attacker out. Most platforms have a recovery flow that uses your phone number or a backup email. Use it, even if the hacker changed your password or recovery options.

• Change your password to a long, unique passphrase (at least 12 characters) that you haven’t used elsewhere.
• Log out of all other sessions – look for a “sign out of all devices” option in security settings. This instantly kicks the hacker off.
• Check recovery options – make sure your phone number and backup email are still yours, and remove any the hacker added.
• Review recent activity – most services show a list of recent logins with location and device. Look for anything unfamiliar and revoke it.

If you cannot get back in, use the platform’s official account recovery page. Be prepared to prove you own the account, often by entering a code sent to your phone or backup email, or by answering security questions you set up long ago.

Why Hackers Target Email and Social Accounts

Email is the master key to your digital life. A hacked inbox lets someone reset passwords for banking, shopping, and cloud storage. Social media accounts are valuable for spreading scams, impersonating you to your friends, or reselling the handle. Hackers often gain access through:

• Phishing – fake login pages that look real and steal your credentials.
• Password reuse – using the same password on multiple sites means one breach gives access everywhere.
• Malware – keyloggers or infostealers that record what you type.
• Weak security questions – answers that are guessable from public info (like your mother’s maiden name).
• Session hijacking – stolen cookies that let someone use your logged-in session without your password.

How to Check What the Hacker Did

Once you’re back in, do a full audit. Look for changes the attacker made while inside your account:

• Forwarding rules in email – a common trick is to set up a rule that copies all incoming mail to the hacker’s address.
• Sent messages – check for phishing emails or spam sent from your account.
• Recovery email/phone – ensure they weren’t changed to the attacker’s.
• Connected apps – revoke any third-party apps you don’t recognize that have access to your account.
• Profile information – on social media, check for changed name, bio, or profile picture.

For email, also check your “deleted” and “drafts” folders – hackers sometimes delete evidence or leave draft messages.

Securing Your Account for the Future

The single most effective step is enabling two-factor authentication (2FA). This requires a second code, usually from an authenticator app or SMS, in addition to your password. Even if a hacker steals your password, they cannot log in without that second factor.

Use an authenticator app (like Google Authenticator or Authy) rather than SMS, because SIM-swapping can intercept text messages. Also, update your security questions to answers that aren’t publicly guessable, or better, use a password manager that can generate and store strong unique passwords for every site.

What to Tell Your Contacts and Other Services

If your social media was compromised, your friends may have received scam messages or links from your account. Post a simple status update saying you were hacked and to ignore any suspicious messages from you. For email, if you sent phishing emails, let important contacts know so they don’t click on anything.

If you used the same password on other important accounts (bank, work, etc.), change those passwords immediately – even if they weren’t hacked, they’re at risk. Also check for any password-reset emails in your inbox that you didn’t request; those indicate the hacker tried to access other services.

Common Mistakes to Avoid After a Hack

• Reusing the same password again – if you change it to something you’ve used before, you’re back to square one.
• Ignoring the “log out all devices” option – if you skip this, the hacker stays in.
• Not checking for forwarding rules – you may regain access but still have your mail silently copied.
• Clicking on “hacked” pop-ups or ads – these are often scams that try to install more malware.
• Paying a ransom – most hackers won’t return your account even if you pay, and it encourages further attacks.

When to Seek Help or Report the Hack

If you cannot regain access, use the platform’s official support channels. For serious cases involving identity theft or financial fraud, report it to your local law enforcement and the relevant cybercrime unit. If you lost money, contact your bank. Otherwise, the standard recovery flow is usually enough.

For email accounts, check if your provider offers a “security checklist” or “account recovery” page that walks you through the steps. Many large providers also let you report a hacked account directly.

Frequently Asked Questions

Can a hacker still access my account after I change the password?

If you log out all sessions and change the password, the hacker should be locked out. However, if they installed malware on your device, they could still capture your new password. That’s why you should also scan your device for malware.

What if I don’t have a backup email or phone number?

Most platforms have a manual review process, but it can take days. You may be asked to provide ID or answer security questions. If you have no recovery options, try the platform’s “account recovery” form and provide as much detail as possible about your account history.

Should I tell my friends I was hacked?

Yes, especially on social media. If the hacker sent messages or posted from your account, your friends need to know not to click on any links they received. A brief status update is enough.

Is SMS two-factor authentication safe?

It’s better than nothing, but SIM-swapping attacks can intercept your texts. An authenticator app is more secure because it’s tied to your device, not your phone number.

How do I know if my password was stolen in a data breach?

You can use a service like Have I Been Pwned to check if your email appears in known breaches. If it does, change that password immediately, especially if you use it on multiple sites.

What should I do if the hacker changed my recovery email and phone?

Use the platform’s “forgot password” flow and look for an option like “I can’t access these” to start a manual verification. You may need to provide your ID or answer security questions. Act fast, as some platforms lock the account after multiple failed attempts.

Related

• Warzone Stuck on Checking for Updates? Fixes
• iQOO Z11 Lite vs Poco M8X 5G: What We Can Verify
• SSL Certificate CAA Record Errors: How to Fix