Recover Hacked Email: The Complete Step-by-Step Checklist

Your inbox looks different this morning. A folder you never created, sitting at the top. An email in your Sent folder that you definitely didn't write. Or a password reset for an account you forgot you had.

If you're reading this, someone got into your account. Don't panic. Yes, it's invasive — that inbox holds your passwords, your receipts, your private conversations. But you can fix this. Here's your step-by-step guide to recover a hacked email, in order.

The Signs You're Dealing With an Actual Hack

Not every weird email means compromise. Here's what actually points to a real breach:

• Emails in your Sent folder you didn't write
• Your account won't accept your password even though you haven't changed it
• Strange contacts, folders, or filters you didn't create
• Friends say they got messages from you that looked off
• Your login activity shows locations you've never been

If two or more of these show up, assume the worst and move fast. (The worst-case assumption is the only one that costs you nothing here.)

How to Recover a Hacked Email: The Step-by-Step Process

Start here. These steps work whether you can still log in or you're locked out completely.

Step 1: Sign out everywhere. Most email services — Gmail, Outlook, Yahoo — let you view active sessions from a security page. Sign out of every device. Don't skip this. A hacker sitting in your account on their phone can undo everything you do next.

Step 2: Change your password. Use a password you've never used anywhere else. If you reused this password on other sites, those accounts are next — we'll handle that shortly. A password manager makes this easier. If you don't use one, start now. Bitwarden is free and solid.

Step 3: Turn on two-factor authentication. This is the single biggest thing you can do to prevent a repeat. Prefer an authenticator app (Google Authenticator, Authy, Microsoft Authenticator) over SMS. Text messages can be intercepted through SIM-swap attacks.

Step 4: Check your recovery options. Hackers often change your phone number or backup email to lock you out permanently. Verify these still belong to you. If they've been tampered with, you'll need account recovery — support can help, but it's a slower process.

Step 5: Review your sent folder and trash. See what they sent. This matters for two reasons: you need to warn contacts about phishing emails that came from your address, and you need to know the scope of the damage.

Step 6: Delete anything suspicious. Remove folders, filters, and rules the attacker created. Check your forwarding settings especially — that's how attackers keep access even after you change the password.

How to Secure Your Email After a Hack

Recovering the account is step one. What you do next determines whether it happens again.

Your email is the skeleton key to your digital life. Password resets, bank alerts, shipping notifications — it all routes through there. So while you're securing the account itself, secure what it touches.

Change passwords for anything sensitive. Banks, credit cards, crypto, social media, work accounts. Prioritize financial stuff first. If you used the same password anywhere, change it there too — no exceptions.

Enable two-factor authentication everywhere it's offered. It's annoying. It's also the cheapest insurance you'll ever buy. Most major services support it now.

Watch for unauthorized purchases. Check your bank and credit card statements for small charges — hackers sometimes test cards with tiny purchases before bigger ones hit.

Tell your contacts. A short, honest message goes a long way: "I got hacked. Ignore anything strange from me until I say otherwise." Real people appreciate the heads-up, and it stops the spread.

What to Do When Your Email Is Compromised

If you're reading this because something feels off but you're not sure, here's the short version of what to do when your email is compromised: check the sent folder, review login activity, and change your password immediately. Don't wait for confirmation — act on suspicion.

The email account is rarely the only target. If the attacker had your password, they probably tried it elsewhere.

Log into each major service and check the login history. Look for unfamiliar devices or locations. Most platforms show this under Security or Privacy settings.

If you find other compromised accounts, repeat the recovery steps above on each one. Work through them one at a time — don't try to do everything at once, or you'll miss something.

How to Reclaim Your Email Account From a Hacker

Here