1. Change Your Password

If you can still access the account, change the password immediately.

Choose a strong, unique password that you haven't used on another website.

Avoid simply changing one or two characters of an existing password.

If you've reused that password elsewhere, those accounts should also be considered potentially exposed.

‎

2. Enable Multi-Factor Authentication

Multi-Factor Authentication provides another layer of protection beyond your password.

When enabled, signing in generally requires an additional verification method, such as an authentication app or security prompt.

If your account supports MFA, enable it as soon as possible.

‎

3. Check Your Account Activity

Many online services allow you to review recent sign-ins and connected devices.

Look for activity you don't recognise.

If you see unfamiliar sessions, devices or locations, sign them out where possible and review your security settings.

‎

4. Check Your Recovery Information

Attackers may attempt to change the recovery email address or phone number associated with an account.

Check that your recovery information is still correct.

Also look for unexpected changes to security questions, authentication methods or connected applications.

‎

5. Check Your Email Rules

Email accounts can be particularly valuable to attackers.

Someone who gains access may create forwarding rules that secretly send copies of your emails elsewhere.

Check your mailbox settings for unfamiliar forwarding addresses, rules or filters.

If you find something you don't recognise, remove it and secure the account.

‎

6. Don't Forget Your Other Accounts

If the compromised password was reused elsewhere, change it on every affected account.

Start with particularly important accounts such as:

• Email

• Banking

• Microsoft accounts

• Apple or Google accounts

• Social media

• Shopping accounts

A password manager can make it much easier to create and manage unique passwords for each service.

‎

7. Be Careful With Follow-Up Messages

After an account has been compromised, attackers may attempt to contact you again.

Be cautious of unexpected messages claiming to offer account recovery or technical support.

Don't provide passwords, verification codes or remote access to someone who contacts you unexpectedly.

Final Thoughts

A compromised account can be stressful, but acting quickly can limit the potential damage.

Change the password, enable MFA, review account activity and check that your recovery settings haven't been changed.

If you're unsure whether an account or computer has been compromised, getting professional assistance can help you determine what happened and what steps should be taken next.