Email hacked? Here's what to do (pictures)

Having your email account hacked can be violating and panic-inducing. Here's what to do when it happens, and what you can do to prevent future attacks.

Sharon Profis
1 of 11 Sharon Profis

How to fix and prevent a hacked email account

If you’re ever unlucky enough to fall victim of an email hacker, follow this guide. The hope is that if you follow each step, you’ll never have to send another "Sorry everyone, my account was hacked" email again.

2 of 11 Sharon Profis

Regain access to your account

Hackers don’t always change your email account password. There are plenty of scenarios where they simply log in, send out a mass email to your contacts, and move on to the next victim. Other types, however, will change your password to stave you off.

In that case, the first thing you should do is regain access to your account. Just use the standard "Forgot your password?" link at the sign-in screen to reset your password and get back into your account. You’ll either have to answer security questions, or recover it using a backup email address.

3 of 11 Sharon Profis

Stop using easy passwords

Whether or not the hacker changed your password, now's the time to choose a new one. This guide is very helpful in suggesting guidelines for hard-to-crack passwords, which involve using many characters including uppercase letters, lowercase letters, symbols, and even spaces.

Even better, consider using a password manager. LastPass -- among others like DashLane -- securely stores your passwords and auto-generates complex, hard-to-crack passwords less vulnerable to hackings.

Here's more on LastPass and how to get started with the free service.

4 of 11 Sharon Profis

Reenter your password on other devices

After changing your password, remember to go into those phone and tablet settings to enter your new password so that your mail arrives as usual.

5 of 11 Sharon Profis

Check your settings

Back in your email account settings, make sure the hacker hasn’t changed any settings that will give them easy access to your account in the future. For example, check that your secondary (recovery) email is still accurate.

Also check that the hacker didn’t introduce any forwarding rules, so that any emails you receive also get sent to their account.

6 of 11 Sharon Profis

Kick out active logins

Before you go any further, glance at your active logins to see if anyone is currently accessing your account. If you changed your password, it shouldn't be a problem, but this is a good habit to establish anyhow, especially if you've logged in from a public computer.
On Gmail, you'll find it by clicking "Details" in the bottom-right corner of your inbox, right below "Last account activity." If you see any suspicious logins, use the link provided to kick them out.
Currently, Yahoo Mail lets you view active sessions, but there's no option to log them out.
Outlook.com doesn't currently seem to provide either option.

7 of 11 Sharon Profis

Let your friends know

Hackers will often use your email account to distribute malicious software by emailing your contacts.

Send a warning email to friends and family letting them know that if they've received a suspicious email from you, it should be deleted and ignored.

8 of 11 Sharon Profis

Implement two-factor authentication

If your email was hacked, it can be safely assumed that you have not implemented two-step authentication, which is the best line of defense against hackers.

When it’s enabled, logging into your account requires one extra step. After you enter your password, a code is sent to your phone, which you then enter in the next screen. You only have to do this once for "recognized" computers and devices, and it means that unless a hacker gained control of your phone, there’s no way they can log into your account -- even if they have your password.

Here’s how to do it on many of the popular email and social media platforms.

9 of 11 Sharon Profis

Check other sites

Now’s the time when you realize why tech and security experts passionately recommend against recycling passwords. If you used your email account password for other online accounts (like Facebook), a hacker who obtained your email password can quickly find out what other online accounts you own, and use your password to access them. 
If you're a guilty password recycler, go and change your password on those other platforms, too.

10 of 11 Sharon Profis

Avoid phishing traps in the future

There are so many varying tactics used that it's often difficult to figure out exactly how you fell victim to an email hacking. One of the most common (and successful) methods, however, is through phishing.

Rick Broida offers an excellent overview about phishing, and how to spot a phishing email.

11 of 11 Sharon Profis

Run a malware scan

Whether the hacker used malware to gain access to your email account, or it was installed as a result of someone emailing you a malicious link, now's a good time to run a malware scan. 
There are several options with AvastMalwarebytes, and BitDefender being a few of the more popular scanners.

More Galleries

2022 Ford Bronco Raptor is ready to catch big air

More Galleries

2022 Ford Bronco Raptor is ready to catch big air

55 Photos
2022's best TV shows you can't miss on Netflix, HBO, Disney Plus and more

More Galleries

2022's best TV shows you can't miss on Netflix, HBO, Disney Plus and more

64 Photos
The best Nintendo Switch games to play right now

More Galleries

The best Nintendo Switch games to play right now

41 Photos
2023 Cadillac Escalade V: Ready to roar

More Galleries

2023 Cadillac Escalade V: Ready to roar

5 Photos
Inside the Smithsonian's Steven F. Udvar-Hazy Center

More Galleries

Inside the Smithsonian's Steven F. Udvar-Hazy Center

44 Photos
Best dating apps of 2021

More Galleries

Best dating apps of 2021

13 Photos
The 51 best VR games

More Galleries

The 51 best VR games

53 Photos