Back In Your Account? Your 24-Hour Cleanup Checklist

1. 1
   On Google, go to your Google Account, tap Security & sign-in, and on the Recent security events panel select Review security events. For anything you did not do, select No, it wasn't me and follow the steps.Read to them:“On Google, go to your Google Account, tap Security & sign-in, and on the Recent security events panel select Review security events. For anything you did not do, select No, it wasn't me and follow the steps.”source
2. 2
   Check the devices signed in to your account. On Google, tap Your devices, then Manage devices. For one you do not know, select Don't recognize a device? and follow the steps.Read to them:“Check the devices signed in to your account. On Google, tap Your devices, then Manage devices. For one you do not know, select Don't recognize a device? and follow the steps.”source
3. 3
   Change your password to a strong one you do not use anywhere else. On Microsoft, run a full antivirus scan first, then change it.Read to them:“Change your password to a strong one you do not use anywhere else. On Microsoft, run a full antivirus scan first, then change it.”source

Attackers often add forwarding rules or filters so they keep seeing your mail, or so you never see security alerts.

1. 1
   Gmail: remove any labels, filters or forwarding rules you did not set up.Read to them:“Gmail: remove any labels, filters or forwarding rules you did not set up.”source
2. 2
   Outlook: check your connected accounts, forwarding and automatic replies.Read to them:“Outlook: check your connected accounts, forwarding and automatic replies.”source
3. 3
   Remove apps and browser extensions you do not recognize from your account and your browser.Read to them:“Remove apps and browser extensions you do not recognize from your account and your browser.”source
4. 4
   On social accounts, check for linked apps and new admins you did not add, using the platform's own settings.Read to them:“On social accounts, check for linked apps and new admins you did not add, using the platform's own settings.”Unconfirmed, test pending

1. 1
   Check your recovery phone number and recovery email. Change anything you did not set.Read to them:“Check your recovery phone number and recovery email. Change anything you did not set.”source
2. 2
   Apple: on account.apple.com, review your personal and security info and remove devices you do not know.Read to them:“Apple: on account.apple.com, review your personal and security info and remove devices you do not know.”source
3. 3
   Look at saved cards and payment methods in the account. If card or bank details were saved there, contact your bank.Read to them:“Look at saved cards and payment methods in the account. If card or bank details were saved there, contact your bank.”source

1. 1
   Turn on 2-Step Verification. Then a stolen password alone is not enough to get in.Read to them:“Turn on 2-Step Verification. Then a stolen password alone is not enough to get in.”source
2. 2
   Where you can, use an authenticator app or a security key instead of text message codes.Read to them:“Where you can, use an authenticator app or a security key instead of text message codes.”source
3. 3
   Add a passkey. Passkeys cannot be shared, copied or given away by mistake. On Google, go to myaccount.google.com/signinoptions/passkeys and tap Create a passkey.Read to them:“Add a passkey. Passkeys cannot be shared, copied or given away by mistake. On Google, go to myaccount.google.com/signinoptions/passkeys and tap Create a passkey.”source
4. 4
   Save your backup codes somewhere safe and offline, such as a printed recovery kit.Read to them:“Save your backup codes somewhere safe and offline, such as a printed recovery kit.”

If the attacker sent messages from your account, your friends may still believe them. A short note stops them from sending money or codes.

• Say your account was hacked and is back in your control.
• Say any message asking for money, codes or links was not from you.
• Ask them not to click links from that time and to report anything they got.
• Copy a ready-made message from our templates page.

1. 1
   Look at your bank, card and payment accounts for charges or changes you did not make. Report anything strange to that company.Read to them:“Look at your bank, card and payment accounts for charges or changes you did not make. Report anything strange to that company.”source
2. 2
   Make sure no one gave your bank or a government office instructions in your name, like opening an account or moving money.Read to them:“Make sure no one gave your bank or a government office instructions in your name, like opening an account or moving money.”source
3. 3
   In the US, if someone used your Social Security number, report it at IdentityTheft.gov and get a recovery plan.Read to them:“In the US, if someone used your Social Security number, report it at IdentityTheft.gov and get a recovery plan.”source
4. 4
   Report the scam to your country's fraud or cybercrime service, listed below.Read to them:“Report the scam to your country's fraud or cybercrime service, listed below.”