I've Been Hacked. What Do I Do?

Can you still log in?

Try logging in right now. If you can still access the account, do not log out — go straight to Step 2. If you're locked out, jump to the recovery links on the right.

Change your password immediately

Use a different device (phone or another computer) if possible — your current device may be compromised. Make it long, random, and unique. Use our Password Generator above.

Log out all other sessions

Every platform has a "Sign out of all devices" option. Use it now — this boots the hacker out immediately even if they're actively inside your account.

Gmail: myaccount.google.com → Security → Your devices
Facebook: Settings → Password and Security → Where you're logged in
Instagram: Settings → Accounts Centre → Password and Security → Where you're logged in

Turn on MFA right now

This is the single most important thing after recovering access. Even if the hacker still has your password, they will not be able to get back in. Pick your platform from the tabs above.

Check what they did inside your account

Look through sent emails, messages, posts, and purchase history. Forward any suspicious sent emails to yourself for evidence. Screenshot anything unusual.

Warn your contacts

Hackers often use compromised accounts to send phishing messages to your friends and family. Post a message or text your contacts: "My account was hacked — ignore any unusual messages from me sent in the last [X] hours."

Change the same password everywhere else

If you used the same password on other accounts, change those too — right now. Hackers run automated tools that try stolen passwords across hundreds of sites within minutes.

Report it to the platform

Even if you've recovered access, report the compromise. This creates a record, may trigger additional security protections, and helps platforms track attack patterns.

Check your email for password reset requests

Look through your inbox and trash for any password reset emails you didn't request. This shows you which other accounts the hacker may have tried to access using your email.