That sinking feeling when friends say ‘why did you send me this strange link?’ is awful. Your email is the key to almost everything else online, so speed matters. Here is exactly what to do if your email account is hacked.
Act Fast: The First 30 Minutes
Don’t panic, but don’t wait either.
Change Your Password Immediately
If you can still log in, create a long, unique password right away. If you can’t, use the ‘Forgot password’ option to recover the account.
Sign Out All Other Devices
Most providers let you log out every active session. This kicks the hacker out even if they know your old password.
Clean Up and Secure Your Account
Once you’re back in, look for the traps hackers leave behind.
- Check forwarding rules and filters you didn’t create
- Review recovery email and phone number
- Turn on two-factor authentication
- Warn your contacts not to click recent messages
Check Your Other Accounts
If you reused the password anywhere, change it there too, starting with banking and social media.
Why Email Hacks Are So Serious
Your email account is the master key to your digital life. Almost every service sends password resets to your inbox, which means whoever controls it can potentially take over everything else.
What Hackers Do With a Stolen Inbox
They search for banking, shopping and social media accounts, reset passwords, read private messages and send scam emails to your contacts. Some quietly watch for weeks before acting, waiting for a valuable moment.
Why Speed Matters
Every hour the attacker has access, they can reset more accounts. Acting quickly limits how far the damage spreads, so don’t delay your first steps while you search for perfect advice.
What to Do If You Are Locked Out Completely
Sometimes the hacker changes your password before you notice. You can still recover the account, but you’ll need patience and accurate information.
Use the Official Recovery Process
Go to your email provider’s recovery page and answer questions as accurately as you can. Use a device and location you’ve used before, because providers often trust these more. Avoid websites or people who promise to ‘recover’ your account for a fee, as many are scams.
Contact Support and Alert Your Contacts
If recovery fails, contact the provider’s support and keep trying. Meanwhile, tell friends and colleagues through other channels that your email was compromised, so they don’t open strange links.
How to Make Your Email Hard to Hack Again
After the scare, strengthen the account so this doesn’t repeat.
Use Strong, Unique Credentials
Create a long passphrase you don’t use anywhere else, and store it in a password manager. Avoid using personal details like birthdays or pet names, because they’re easy to guess or find on social media.
Add Extra Layers of Protection
Enable two-factor authentication, ideally with an authenticator app or security key instead of SMS. Review your recovery options regularly, and keep an eye on login alerts from your provider.
Common Mistakes After an Email Hack
The first few hours are stressful, and people often make the same avoidable errors. The biggest one is fixing the email account but forgetting the accounts connected to it. Hackers love this, because your inbox may already contain password reset emails, receipts and private documents that they can use later.
Ignoring Connected Accounts
Search your inbox for words like ‘password’, ‘receipt’, ‘bank’ and ‘verify’ to see which accounts are tied to this address. Change passwords for the important ones first, then work through the rest. It’s a bit boring, but it closes the gaps that hackers rely on.
Quick Checklist and a Real-Life Example
Keep this checklist handy in case it happens again.
- Reset the password and sign out all devices
- Remove unknown forwarding rules and filters
- Check recovery phone and backup email
- Turn on two-factor authentication
- Scan your computer and phone for malware
- Warn your contacts and watch your bank accounts
A Real-Life Example
A small business owner I know discovered that every email from her customers was being quietly forwarded to a stranger. Because she checked the forwarding rules, she found it within a day. If she had only changed her password, the forwarding would have continued.
Key Takeaways and Your Action Plan
An email breach feels personal because so much of your life passes through that inbox. The encouraging part is that recovery is usually possible, and the steps are clear: regain control, remove hidden changes, secure the account and warn the people who might receive fake messages.
What to Do This Week
This week, review your email security settings even if you haven’t been hacked. Confirm your recovery phone number, check forwarding rules, enable two-factor authentication and make sure your email password isn’t used anywhere else. Prevention takes ten minutes, while recovery can take days.
Frequently Asked Questions
How do hackers get into email accounts?
Mostly through phishing, reused passwords from data breaches, and malware on your device.
Should I tell my bank?
If your bank or payment apps use that email, yes. Ask them to watch for suspicious activity.
How do I know if someone is still accessing my email?
Check the account activity or recent devices section in your email settings. If you see logins from unknown devices or locations, sign them out and change your password again.
Should I create a new email address?
Not always. If you’ve regained control and secured the account, you can keep it. If you can’t recover it or it keeps getting targeted, a new address with strong security might be easier.
Final Thoughts
Getting hacked is stressful, but it’s fixable. Secure the account, check for hidden rules, and use two-factor authentication from now on.