If you suspect your email, social media, bank or other account has been hacked, act quickly. Most attackers do not stop after the first login; they try to reset passwords, create new access and steal more data.
This is your emergency recovery checklist for 2026. Follow the steps in order to regain control and reduce the chance of a second takeover.
📑 Table of Contents
⏱️ Immediate first steps (minutes matter)
- Disconnect your device temporarily (turn off WiFi/mobile data) if you suspect an active compromise.
- Do not click on password reset emails or links that you do not trust. Always go to the official website manually.
- Prepare a safe plan: use a secondary device if available to change your credentials.
📧 Secure your email first
Email is the master reset key for many services. If your email is compromised, attackers can:
- Change passwords on other accounts.
- Enable new recovery options.
- Access your 2FA codes.
Steps:
- Sign in to your email account.
- Change the password to a strong, unique one.
- Check security settings: recovery email, linked devices, and login history.
- Enable 2FA with an authenticator app or security key if possible.
🔑 Change passwords correctly
After regaining email control, change passwords for the most important accounts:
- Banking and payment apps
- Cloud storage
- Social networks
- Shopping accounts
Use unique passwords for every service and prefer a password manager to avoid reuse.
🚨 If you reused the same password anywhere, treat every account that used it as compromised.
🧰 Revoke sessions and check devices
Most services let you review active sessions. Do this:
- Log out of unknown devices.
- Remove suspicious browser sessions and API access.
- Check for new recovery methods you did not add.
Then scan your phone/PC for malware if you installed any suspicious apps or files.
📣 Notify contacts and financial providers
Finally:
- Tell your contacts if your social accounts were accessed. Attackers may scam friends using your identity.
- Contact your bank immediately if you entered card details or money transfers happened.
- Report scams on the platform where the compromise occurred.
⚡ Generate strong replacements now
Replace compromised passwords with high-entropy ones. Strong password + 2FA is the fastest way to stop follow-up attacks.
🛡️ Generate Strong Passwords