How to Recover Email and Social Accounts After an Evil-Twin Wi-Fi Login

Oh no! Did you accidentally log into your email or social media on a fake Wi-Fi network? These fake networks, sometimes called "evil twin" networks, are designed to look legitimate but are actually traps set by sneaky attackers to steal your login details.

Recognising an 'Evil Twin' Wi-Fi Attack

An evil twin Wi-Fi network is a fraudulent Wi-Fi hotspot that looks identical to a legitimate one, often found in public places like cafes, airports, or hotels. Attackers set these up to intercept your internet traffic and steal sensitive information like usernames and passwords.

While it can be tricky to spot one, there are some signs that might suggest you've connected to a dodgy network. If you notice any of these, it's best to disconnect immediately and assume your data might have been compromised.

• The Wi-Fi network has a very generic name like 'Free Wi-Fi' or 'Public Network', but isn't the official one advertised by the venue.
• You're asked to log in multiple times to a service you've already accessed on that network without doing anything different.
• Pages look unusual, or you're seeing unexpected pop-ups or error messages.
• Your device is acting sluggish or struggling to connect to websites it usually handles with ease.

Disconnect and Get to Safety

The very first thing you need to do is disconnect from that suspicious Wi-Fi network. This stops any further information from potentially being stolen. Then, find a safe and secure internet connection to begin your recovery process.

• Turn off your device's Wi-Fi. (This is usually in your phone's quick settings or your computer's network icon.)
• If you have mobile data, switch to that. This is generally a much safer option for sensitive tasks.
• Alternatively, connect to a trusted home or work network that you know is secure.

Changing Your Passwords Immediately

This is the most critical step. Assume that any password you used while connected to the evil twin network has been compromised. You need to change these passwords on a secure connection as soon as possible. Focus on email accounts first, as these often act as recovery points for other services.

• On a clean device (one that definitely wasn't on the suspicious Wi-Fi) and secure internet connection, go directly to the website of the affected service (e.g., mail.google.com, facebook.com).
• Do NOT click on any links in emails that claim to be from the service – type the address yourself.
• Look for 'Settings' or 'Security' then 'Change password' or 'Password & Security'.
• Choose a strong, unique password for each account. Think of a long phrase with a mix of upper and lowercase letters, numbers, and symbols.

Enabling Two-Factor Authentication (2FA)

Two-Factor Authentication (2FA), sometimes called multi-factor authentication, is like adding an extra lock to your digital doors. Even if someone has your password, they won't be able to get in without that second factor, often a code sent to your phone or generated by an app.

• After changing your password, look for 'Two-Factor Authentication', '2FA', or 'Login Approvals' in your account settings.
• Follow the on-screen instructions to set it up. Using an authenticator app (like Google Authenticator or Authy) is generally more secure than SMS codes.

Checking for Suspicious Activity

After securing your accounts, take a moment to look for anything out of the ordinary. Attackers might have already used your access to send spam, change settings, or access your personal information. Being vigilant now can help you spot and stop further damage.

• Check your sent email folder for messages you didn't send.
• Review your social media posts, friend requests, and direct messages for anything suspicious.
• Look at your account's 'Activity Log' or 'Login History' (most services have one, usually under 'Security' settings) for unfamiliar logins or locations.
• If you find anything, report it to the service provider and change your password again, just in case.

Key takeaway

Dealing with an evil twin Wi-Fi attack can be unsettling, but by acting quickly and following these steps, you can regain control of your accounts and boost your overall online security. Always be cautious about public Wi-Fi and consider using a Virtual Private Network (VPN) for extra protection when connecting in public.