Skip to main content

    I Got Hacked — What Do I Do?

    Stay calm. Work through these in order.

    Before you start

    If your computer might have a virus, do these steps from a different device — your phone, a tablet, or a relative's computer. The hacker may still be watching the infected one.

    1

    Right now

    Change the password

    Open the affected account on a different device if possible. Pick a brand-new password — not one you've used before. Use 12+ characters.

    2

    Next 10 min

    Turn on two-factor

    In the account's Security settings, turn on two-factor authentication. This blocks the hacker even if they kept your password.

    3

    Next 15 min

    Sign out everywhere

    Most accounts have "Sign out of all devices" or "Active sessions" — use it. The hacker is kicked out.

    4

    Next 30 min

    Check for damage

    Look at recent emails sent, posts made, money moved, or password reset emails you didn't request. Note anything strange.

    5

    Same day

    Check your other accounts

    If you used the same password elsewhere, change those too. Banks first, then email, then social media.

    6

    Same day

    Tell your bank

    If anything financial was touched — call the number on the back of your card. Ask for new card numbers if needed.

    7

    This week

    Place a credit freeze

    Free at all 3 bureaus. Stops anyone from opening new credit in your name. (See our Credit Freeze Coach.)

    8

    This week

    Report it

    File at IdentityTheft.gov — the FTC walks you through every step and creates a recovery plan.

    Once you're locked back in

    Watch your bank statements and email closely for 30 days. If something else strange happens, repeat this checklist. And tell a family member what happened — they may need to watch their own accounts too if you share any.