If something feels off about your email — strange sent messages, missing emails, or a password that suddenly stops working — you might have a security problem. The good news is that you can take concrete steps right now to assess the damage and lock things down. For a related guide, see Email Bouncing Back? What the Error Means and How to Fix It.
Signs Your Email May Have Been Compromised
Before you take action, confirm whether there's actually a problem. Look for these indicators:
- Emails you didn't send appearing in your sent folder
- Password reset emails you didn't request
- Inbox messages you didn't delete going missing
- Login notifications from unfamiliar locations or devices
- Friends or contacts reporting suspicious emails coming from your address
- Unfamiliar forwarding rules or filters you didn't create
If you see any of these, move to the next section immediately.
Step 1: Regain Control of Your Account
If you're locked out or suspect someone else has access, your first priority is to secure your account.
- Try signing in. Go to your email provider's login page. If your password still works, change it immediately.
- Use "Forgot Password" if you can't log in. Most providers (Gmail, Outlook, Yahoo) will send a reset link to a recovery email or phone number.
- Check account recovery options. Once you're back in, verify that the recovery email and phone number on file are still yours. Hackers often change these to lock you out permanently.
What to do if you're locked out and recovery options were changed: Contact your email provider's support team directly. Google, Microsoft, and Yahoo all have account recovery forms that ask you to verify your identity through alternative means.
Step 2: Check What the Hacker May Have Done
Once you're back in, look for signs of what they accessed or changed:
- Sent mail. Scan your sent folder for messages you didn't write — especially emails with links sent to your contacts.
- Filters and forwarding. Check your mail settings for rules that automatically forward messages or archive incoming email. Hackers often set these up so you don't notice their ongoing access.
- Connected apps and devices. In Google, go to Security → Your Devices. In Outlook, go to Security → Recent Activity. Review and sign out of anything you don't recognize.
- Account changes. Look for recent changes to your profile name, recovery info, or password.
Step 3: Secure Your Account Immediately
After checking for damage, lock down your account to prevent another breach:
- Change your password. Make it long and unique — at least 16 characters with a mix of letters, numbers, and symbols. Don't reuse a password from any other site.
- Enable two-factor authentication (2FA). This is the single most effective step you can take. In Google: Security → 2-Step Verification. In Outlook: Security → Advanced Security. This means even if someone gets your password, they still can't log in without a second code.
- Remove suspicious connected apps. Revoke access for any third-party apps you don't use or recognize.
- Check your backup email and phone. Make sure those accounts are secure too — if the hacker compromised those, they could lock you out again.
Step 4: Clean Up and Limit the Damage
If the hacker sent emails to your contacts, you need to act quickly:
- Send a brief message to anyone who may have received a suspicious email from you. Warn them not to click links or enter passwords from those messages.
- Delete any suspicious emails in your sent folder.
- Remove unfamiliar emails from your inbox — especially phishing emails that may have been sent to you to gather more information.
If you used the same password on other sites, change those passwords too. Credential stuffing — where hackers try stolen passwords across multiple sites — is one of the most common follow-up attacks.
If You Still See Problems After Securing Your Account
If you've changed your password, enabled 2FA, and removed suspicious access but still notice unusual activity, consider these possibilities:
- Your computer may have malware. Run a full scan with a trusted antivirus program. Keyloggers can capture your password even after you change it.
- You may have fallen for a phishing attack. Check your browser extensions and clear your cache and cookies. A fake login page could have captured your credentials.
- Your email provider may be involved in a broader breach. Visit haveibeenpwned.com to check if your email appeared in a known data breach.
When to Seek Further Help
Contact your email provider's support if:
- You cannot recover your account after multiple attempts
- You believe financial accounts linked to your email have been accessed
- You receive threats or suspicious legal correspondence through your account
Bottom Line
A hacked email account is stressful, but taking quick, organized action limits the damage. Check for signs of compromise, regain access, change your password, enable two-factor authentication, and clean up any fallout. Then use that same checklist regularly — especially checking your connected apps and recovery settings — to keep your account secure going forward.