What Does It Mean When an Account Is Hacked, and What Do I Do in the First Hour?

The short version:

• Secure your email account first. It can reset your other accounts.
• Get back in through the company’s official recovery page. Type the address yourself.
• Tell your contacts that messages from you may be fake.

What “hacked” means

An account is hacked when someone else signs in as you. They may use your email, your social media, or a chat app. Some want your personal details. Some want to send scam messages to your friends.

This happens to careful people too. It is not your fault, and there are clear steps to follow.

Why the first hour matters

Acting quickly helps limit the damage. You also stop fake messages before they reach more of your friends. You do not need to do everything at once. Start at step 1.

Signs of a hack include:

• You cannot sign in.
• You get a notice about a password change you did not make.
• You get a sign-in alert from a device or place you do not know.
• Friends say they got messages from you that you did not send.

Steps

1. Use a safe device. Use your own phone or computer, ideally one you have signed in on before. That helps Google and Facebook recognize you. If you use a computer, update its security software and run a scan before you change any password. Avoid shared or public devices.
2. Secure your email first. Your email can reset the password for your other accounts. Whoever controls it can lock you out of them. If your email is the account that was hacked, do the steps below for it first. See our guide to securing your email.

3. Use the official recovery page. Open the company’s own help page. Type the address yourself. Do not use a link from a message.

   • Google: “Secure a hacked or compromised Google Account” (support.google.com/accounts/answer/6294825)
   • Microsoft: “How to recover a hacked or compromised Microsoft account” (support.microsoft.com/en-us/accounts-billing/manage/how-to-recover-a-hacked-or-compromised-microsoft-account)
   • Apple: “If you think your Apple Account has been compromised” (support.apple.com/102560). If you cannot sign in, start recovery at iforgot.apple.com.
   • Facebook: facebook.com/hacked. Use a device you have used to sign in to Facebook before.
   • Instagram: “If you think your Instagram profile has been hacked” (help.instagram.com)
   • WhatsApp: see the example below.
4. 
   

   Change the password and turn on extra protection. Make a new password that you have not used anywhere else. Change it on any other account that shared the old one. Then turn on two-step sign-in. This is a second check when you sign in, such as a code from an app. Pick a passkey or an authenticator app if the service offers one. A passkey lets you sign in with your fingerprint, face, or screen lock instead of a password. An authenticator app is an app on your phone that makes short sign-in codes. See our guide to two-factor authentication. If you can, also check your email for forwarding rules first (step 6).

   
   

5. Sign out other sessions and remove unknown devices. A session is a period when you are signed in on a browser or app. One device can have several. The steps differ by company:

   • Google: Google Account, then Security & sign-in, then Your devices, then Manage all devices. Select a device and choose Sign out.
   • Microsoft: open Advanced security options, scroll to Sign out everywhere, and select Sign out. It can take up to 24 hours.
   • Apple: go to account.apple.com, select Devices, and remove any you do not know.
6. 
   

   Check your recovery email and phone. These are the backups a company uses to help you get back in. Make sure each one is yours. Remove any you do not know. Also check your email for forwarding rules you did not set up. A forwarding rule sends a copy of your mail to someone else.

   
   
7. Warn your contacts. Send a short message another way, like a phone call or a text. Say: “My account was hacked. Ignore messages from me asking for money or clicks.” Do not forward the fake message.
8. If money is involved, call your bank. Use the number on the back of your card or on a recent statement, or use your bank’s app. Do not use a number from a message or from a search ad. Check your statements for charges you do not know.

If you cannot get the account back, you may need a new account. Tell your contacts the new details.

Worked example: a WhatsApp account takeover

Here is how one recent case works. A friend’s message asks you to “vote” for a child in a contest. The page asks for your phone number, then shows a code and asks you to type it into WhatsApp. That code links the scammer’s device to your account. Our alert explains it: the WhatsApp “vote” message.

If you did this, or are not sure, check your linked devices (other phones or computers connected to your WhatsApp account):

1. Open WhatsApp on your phone.
2. Android: tap the three dots (More), then Linked devices. iPhone: tap Settings (or your profile picture), then Linked devices.
3. Tap any device you do not know, then tap Log out. On an iPhone, tap Log out again to confirm.

If someone has taken over the account itself and you cannot use it, WhatsApp says to log back in. Tap Log back in, enter your phone number, and enter the 6-digit code WhatsApp sends to your phone. Anyone else using the account is logged out when you finish. Changing a password does not remove them. If WhatsApp asks for a two-step verification PIN (or password) you do not know, wait 7 days and try again.

Don’t share a WhatsApp code with anyone. That includes the 6-digit code WhatsApp texts you and the 8-character code a page asks you to type into WhatsApp. Then tell your contacts, as in step 7.

Watch out for fake “recovery” helpers

After a hack, you may see people who offer to get your account back for a fee. Say no. Only the company that runs the account can give it back. Google, for example, says it does not work with any service that claims to offer account or password support. A “helper” may ask for your password, codes, or payment. Do not share any of them.

Where to report

• US: report scams at ReportFraud.ftc.gov. If someone used your personal details, go to IdentityTheft.gov for a free recovery plan.
• UK: if you lost money, tell your bank. You can call 159, which connects you to your bank if it takes part, or use the number on your card. Then report it to Report Fraud, which replaced Action Fraud. In Scotland, call 101.

Do this today (about 5 minutes)
Do this now, before anything goes wrong.

1. Open your main email account’s security settings.
2. Check that the recovery phone and recovery email are yours.

Do not read a code out to someone who contacts you, and do not share a password or code with anyone who offers to get your account back.

Another day: Save your recovery codes in a safe place. It takes about 7 minutes for one account. See our guide to recovery codes and backups.

Checked: 27 Oct 2026, against each company’s official help page. Settings screens change with app updates. If yours looks different, search the company’s help page.

Our disclosure. SafeinAI has no affiliate links and earns nothing from the sites or tools named on this page. If this ever changes we will say so here, on this page.