Protecting Your Email Account from Hackers: A Step-by-Step Guide
If your email account is compromised, the consequences can be severe. Hackers can not only read your messages but also reset passwords and take over other accounts. It’s essential to act quickly and follow a structured approach to minimize the damage. In this article, we’ll outline the immediate measures you should take and provide information on the help pages and support channels offered by major email providers.
General Measures in the Event of a Hacked Email Account
Regardless of the email provider you use, there are some general steps you can take to secure your account. If you can still log in, you have the best chance of containing the damage. It’s crucial to close all possible backdoors step by step.
Case 1: You Can Still Log In
If you can still access your mailbox, follow these steps:
- Change your password: Log in directly via your provider’s official login page, avoiding links from emails that may lead to phishing sites. Choose a new, strong password that you only use for this account and consists of upper and lower case letters, numbers, and special characters.
- Log out all devices and sessions: Many providers offer an overview of the devices and sessions currently logged in in the security settings. End all active sessions or use the “Log off all devices” function to immediately disconnect attackers who still have access to the account.
- Check recovery options: Verify which phone numbers and alternative email addresses are stored for account recovery. Attackers often enter their own data to take over the account permanently. Remove unknown entries and only enter your current data.
- Delete filters and redirects: Check the mailbox rules in the settings. Attackers may set up automatic forwarding or filters to forward emails to a different address or make certain messages invisible. Delete all rules you didn’t create yourself.
- Activate two-factor authentication: If your provider supports it, activate two-factor authentication. When logging in, you’ll need to enter a second factor, such as a code via text message or confirmation in an authenticator app, in addition to your password. This adds an extra layer of protection, even if your password is compromised.
Case 2: You Can No Longer Log In
If you’re locked out of your account, you’ll need to rely on the support of your email provider. Use the recovery form or account wizard, which will guide you through the recovery process.
Microsoft Outlook / Hotmail
Microsoft provides a recovery wizard for hacked accounts. After entering your email address and phone number (if stored), the system checks for suspicious logins and guides you through the process step by step. If you can still log in, change your password and check all stored security data. If access is blocked, use the account recovery form.
Microsoft offers toll-free numbers in the U.S. (1-855-270-0615, 1-800-865-9408, or 1-800-642-7676), but typically refers hacked or blocked accounts to the recovery wizard and online support forms. The hotline can assist if you’re stuck with the online forms or have questions.
Google / Gmail
For Gmail users, it’s essential to review the device and security overview to see which devices have recently accessed your account. Unknown entries can be canceled with a few clicks. Google provides a detailed guide for a complete recovery: Secure a hacked or compromised Google Account. If you can’t log in, visit the account recovery page and follow the steps provided.
Google doesn’t offer a hotline for free Gmail accounts; the entire process is handled through online help pages and the recovery form. Only paying Google Workspace or Business customers are eligible for telephone support.
