How to Recover Your Email Account After Being Hacked

If your email account has been compromised — whether you can still log in or you are completely locked out — this guide covers the main recovery pathways available to you. Every email provider handles recovery slightly differently, so the exact steps, options, and terminology will vary depending on your provider. Use this as a general roadmap and adapt it to the options your provider offers.

The recovery routes below work for any provider — but each inbox has its own recovery pages and screens. For exact instructions, follow your provider's guide:

If the attacker has changed your password and you can no longer log in, you will need to go through your provider's account recovery process. The options available to you depend on what recovery methods you set up before losing access.

Most providers will let you receive a verification code via SMS or a backup email address. This is the fastest way back in. Go to your provider's sign-in page, click "Forgot password" or "Can't sign in", and follow the prompts to verify via your recovery phone or email.

Some providers offer security questions as a fallback. Others may ask you to verify your identity by confirming previous passwords, recent email subjects, account creation date, or other personal details. The questions and process vary widely between providers.

If automated recovery fails — for example, if the attacker has changed your recovery phone and email — you may need to contact your provider's support team. Some providers offer form-based identity verification (e.g., uploading a government-issued ID), while others provide live chat or phone support. Response times and requirements differ significantly.

Here are direct links to the account recovery pages for the most common email providers. Bookmark yours in case you ever need it:

• Gmail / Google: accounts.google.com/signin/recovery
• Outlook / Microsoft: account.live.com/password/reset
• Yahoo: login.yahoo.com/forgot
• iCloud / Apple: iforgot.apple.com
• Proton Mail: account.proton.me/reset-password

In some cases, recovery may not be possible — particularly if you had no recovery options set up, the provider cannot verify your identity, or too much time has passed. If this happens:

• Create a new email account and begin updating your most important services (banking, social media, subscriptions) to use the new address.
• Warn your contacts that your old address was compromised — they may receive phishing emails from it.
• Search for password reset emails in any other email accounts you have, to identify which services were linked to the compromised address.
• Set up recovery options properly on your new account — recovery phone, backup email, and any other methods your provider offers — so you are not in this position again.