Hacked email or social media account: how to get it back
Someone got into your email or social account. Your email is the key to everything else, so take it back first, kick the attacker out, turn on two-step login, and warn your contacts before they get scammed in your name.
Do right now
· Within minutesGo to the platform's account recovery page immediately.
Use "Forgot Password" or "Someone else has access to my account" recovery flow.
Check your backup email and phone number — the hacker may have changed them.
If locked out completely, use the platform's identity verification process.
Do today
· Within hoursChange your password to something strong and unique (16+ characters, or a passphrase).
More detail
Why this matters: if the attacker still knows your old password, they can log right back in. How: open the account's security settings → 'Change password'. Use a passphrase like four random words plus a number, or let a password manager generate one. Never reuse a password from another account.
Enable Two-Factor Authentication (2FA) — use an authenticator app, not SMS if possible.
More detail
Why this matters: even if the attacker has your password, 2FA stops them from logging in without your second factor. How: in security settings, look for '2-step verification' or 'Two-factor authentication'. Choose an app like Google Authenticator, Microsoft Authenticator, or Authy. SMS codes can be intercepted via SIM swap, so prefer an app whenever it's offered.
Review all active sessions and log out unfamiliar devices.
More detail
Most platforms list every device that's currently signed in (settings → 'Where you're logged in' or 'Active sessions'). Sign out anything you don't recognize, including old phones, tablets, and unfamiliar browser sessions in other countries.
Restore your real backup email/phone and remove any the attacker added.
Revoke any third-party apps you don't recognize.
More detail
Attackers sometimes connect malicious third-party apps that keep access even after you change your password. In your account's security settings, look for 'Apps with access' or 'Connected apps' and remove anything unfamiliar.
Notify your contacts that your account was compromised so they ignore suspicious messages.
Change passwords on any other accounts that used the same password.
Check if your email was used to reset passwords elsewhere.
Do this week
· Within daysRun a Have I Been Pwned check on your email addresses.
Set up a password manager so each account has a unique password.
Review email filters and forwarding rules — hackers often set silent forwarding.
Check your "Sent" folder for emails you didn't send.
- 🇺🇸 US
File a report at ReportFraud.ftc.gov if the hacker impersonated you or committed fraud.
- 🇨🇦 CA
Report to the Canadian Anti-Fraud Centre.
- 🇬🇧 UK
Report to Action Fraud (UK).
- 🇪🇺 EU
Find your national CERT/CSIRT and DPA to file a report.
- 🇿🇦 ZA
If a company tells you your data was breached, the Information Regulator's POPIA guidance puts the notification window at 72 hours. Escalate via the Regulator if a controller stalls.
Ongoing protection
· Build the habitUse unique passwords for every account (via password manager).
Use an authenticator app for 2FA on all critical accounts.
Periodically review connected apps and active sessions.
Monitor your email for breach notifications.
Related situations
SIM-Swap Attack
Phone says No Service out of nowhere? Get your number back from your carrier and protect your bank and email in minutes.
Password Manager Breach
Password manager breached? Change your master password and your most important logins in the right order.
Identity Stolen
Someone using your name or ID? Freeze your credit, file a report and close fraudulent accounts with these steps.
Is this happening at work?
If a business account, company device or customer data is involved, the steps change. Get help built for organizations.