Email Hacked?
Recover + secure. Step by step.
Signs hacked
- Friends say "you sent me weird email".
- Sent folder has emails you didn't send.
- Can't login.
- Password changed without you.
- New filters / forwarding rules added.
- Recovery email changed.
Step 1: Try login
- Try old password first.
- If it works = change immediately.
- If locked out — "Forgot password".
- Email recovery code to backup email.
- Or text to phone.
- Follow steps carefully.
Step 2: Strong password
- Use passphrase: 4 random words.
- Example: "Purple-Tractor-Sandwich-9!".
- 20+ characters minimum.
- Different from previous.
- Save in password manager.
- Or in physical password book.
Step 3: Enable 2FA
- Two-factor authentication.
- Code sent to phone.
- Or authenticator app.
- Stops most hacks.
- Gmail / iCloud / Outlook all support.
- Settings → Security.
Step 4: Check filters
- Hacker may have added forwarding.
- Settings → Filters and Forwarding.
- Delete suspicious filters.
- Delete forwarding to unknown emails.
- Reset signature if changed.
- Check recovery options.
Step 5: Notify contacts
- Email all contacts: "I was hacked".
- "Don't click links from me yesterday."
- "Account secure now."
- Especially family + financial contacts.
- Bank — they may be targeted next.
- Stay vigilant for callbacks.
Other accounts
- Email = master key to other accounts.
- Hacker may have reset others.
- Change passwords on:
- Bank, Amazon, Facebook, Apple ID, Google.
- Check all bank statements.
- haveibeenpwned.com — check leaks.
Future-proof
Use unique password per site. Password manager (Bitwarden FREE, 1Password $36/yr). 2FA everywhere. Don't reuse passwords. Senior tip: write critical passwords in physical book in safe place. Tell trusted family member where book is. Hacked = stressful but recoverable.