Passwords & Account SafetyPractical checklist6 min read

What to do if you think an account was hacked

A practical checklist for getting control of an account after suspicious activity.

Reviewed 2026-07-11 • Intended for Anyone who thinks an account is compromised

Key warning

Account recovery settings matter. Check email, phone, backup codes, and signed-in devices.

What this means

Regaining access is only part of recovery. You also need to make sure the attacker did not leave another way back in.

What to do

  1. Change the password from a known-safe device.
  2. Turn on multi-factor authentication.
  3. Review recovery email and phone settings.
  4. Sign out of unknown devices.
  5. Check for forwarding rules, unfamiliar apps, or changed profile details.

Common mistakes

  • Changing only the password but leaving recovery settings changed
  • Ignoring forwarded email rules
  • Using the same infected or untrusted device to recover everything

What to do next

  • Secure the email account first when possible.
  • Change reused passwords on other services.
  • Tell contacts if the account sent scam messages.

When to ask for help

  • You cannot sign in.
  • Money or business data is involved.
  • You need help checking recovery settings and devices.

Need help with this?

Perqline Solutions helps home users and small businesses with remote support, device cleanup, Wi-Fi, account safety basics, and digital systems.