My Account Was Hacked and Password Changed: Step-by-Step Recovery Guide

If your account was hacked and the password was changed without your permission, you need to act quickly — but don’t panic. Most hacked accounts can be recovered, even if the hacker has already changed the password and contact information. This guide walks you through the exact recovery steps for the most common scenarios: Facebook, Gmail, and other email accounts. We’ll also cover what to do after you regain access to prevent it from happening again.

Step 1: Act Fast — What to Do in the First 15 Minutes

The first fifteen minutes after you realize you’ve been hacked are a bit like the first fifteen minutes after a kitchen grease fire… what you do right away matters more than anything you do later. So let’s move quickly, but calmly. No flailing.

1. Change that password everywhere else you used it. This one stings, so be honest with yourself. Reusing one password across accounts is like having one key for your house, your car, and your safe deposit box. Change them all now.
2. Try to log in the normal way. Sometimes the “hack” is really just an old password and a bad memory playing tricks on you (it happens to the best of us). But if the password’s been changed, don’t sit there typing it forty more times hoping the computer changes its mind. Go straight to “Forgot Password” and let the platform send a reset code to your backup email or phone number.
3. Check that backup email and phone. This is the moment of truth. If the code arrives and it’s really you… wonderful, you’re back in. But if the hacker changed your recovery email and phone too, head to the platform’s official account recovery page. That’s your next door in, and we’ll cover it below.
4. Sign out everyone else. If you can still get into your account, kick the intruder out. Go to Account Settings, then Security, and look for “sign out of all sessions” or “log out of all devices.” Think of it as changing the locks while the burglar is still upstairs rummaging through your sock drawer. One click and they’re standing on the porch.
5. Warn your people. Hackers love to wear your face and message your friends asking for gift cards or “emergency” money. A quick heads-up… “Hey, my account was hacked, ignore any weird messages from me”… can save your cousin fifty dollars and a lot of embarrassment.

Facebook Account Hacked and Password Changed: How to Recover It 

If your Facebook account was hacked and both the password and recovery email were changed, visit facebook.com/hacked and select "My account is compromised." From there, you can recover access using Trusted Contacts — friends Facebook will send recovery codes to — or by submitting a government-issued ID for manual review, which typically takes 1 to 3 business days.

Now, let’s slow that down and walk through it together, one step at a time.

1. Go to facebook.com/hacked. This is Facebook’s official page for compromised accounts, and it’s the only door you should be knocking on. Type it into your browser yourself… don’t click a link some stranger sent you promising to “fix” things.
2. Choose “My account is compromised.” Facebook then starts a little question-and-answer wizard to prove you’re you. It might ask for an old password (yes, even the one with your first dog’s name and that meaningful year), or it might lean on your Trusted Contacts.
3. Set up or use Trusted Contacts if you’re locked out. These are 3 to 5 friends you’ve picked ahead of time who can receive recovery codes on your behalf. Think of it like leaving a spare house key with a few trusted neighbors… if you ever get locked out, you call them, they read you the codes, and you’re back inside. If your recovery email and phone were both changed, choose “I don’t have access to these” to reach this option.
4. Submit a government ID if all else fails. When you’re completely shut out, Facebook’s recovery team will accept a photo of your driver’s license or passport to confirm you’re the real account holder. Expect 1 to 3 business days for a human to review it. Patience, not panic.
5. Turn on two-factor authentication the moment you’re back in. Head to Settings, then Security and Login, and switch it on. This is the chain lock that stops this whole headache from happening again.

Email Account Hacked? How to Recover Gmail, Outlook, or Yahoo

Remember, your email is the front door key to your whole digital house. If it’s been broken into, this is where you focus every ounce of your energy. Each provider has its own recovery path, so find yours below.

Gmail

Google keeps its recovery page at accounts.google.com/signin/recovery. Start by verifying your phone number or backup email. But if the hacker got greedy and changed those too, look for the little “Try another way” link… it’s easy to miss, tucked away like the fire exit in a movie theater you never notice until you need it.

• Enter your Gmail address and follow the prompts
• If your phone and backup email are compromised, click “Try another way”
• Google then asks a short quiz about your account history… when you created it, old passwords, frequent contacts. Answer as best you can. Close counts here.

Outlook / Hotmail

Microsoft’s recovery form lives at account.live.com/acsr. The nice part is you can enter any email address you currently have access to, and Microsoft sends recovery instructions there.

• Fill out the account recovery form with as much detail as you can remember
• Give them a working email… even a brand-new one
• Wait up to 24 hours for Microsoft to respond

Yahoo

Yahoo’s starting line is login.yahoo.com/forgot, and it follows the same rhythm as the others. One handy thing… Yahoo can sometimes verify you by phone number even if the hacker changed the number listed on the account, since the code goes through your actual carrier.

• Enter your Yahoo address and request a verification code
• Try the phone-number option even if the listed number looks wrong

Once You’re Back In

Don’t dust off your hands and walk away just yet. Head straight to your Sent folder and see what the intruder mailed out in your name… often it’s a “help, I’m stranded overseas” note begging your friends for money. Delete those messages, then send your contacts a quick heads-up that you were hacked and any odd emails from you should go straight in the trash.

Google Account Hacked: Recovery Steps for Gmail and Google Services 

Here’s the thing about your Google account… it’s not just Gmail. It’s the master key ring for your whole Google life. Your photos, your YouTube history, your saved passwords in Chrome, the backup of your Android phone, maybe even your grandkids’ shared calendar. When a hacker grabs that one account, they’ve grabbed the whole ring. So recovering it matters more than most folks realize.

The good news is Google has one central place to sort this out, and you don’t need to remember a dozen different websites.

1. Go to g.co/recover. That’s Google’s official account recovery page, and it’s shorter to type than most grocery lists. Enter your email address to get started.
2. Answer the questions honestly, even the fuzzy ones. Google will ask things like your last password you can remember, when you created the account, or a verification code sent to your phone. If your memory’s a little foggy on the exact old password… give your best guess anyway. Google is looking at the overall pattern, not grading you like a pop quiz.
3. Use “Try another way” if you’re stuck. If the hacker changed your recovery phone and email, that little link is your side door. It bumps you to other ways of proving you’re really you.
4. Check the damage once you’re back in. Go to your account’s Security section and look at “Your devices” and “Recent security activity.” If you spot a login from a city you’ve never visited (and no, that weekend in Toledo doesn’t count), sign that device out.
5. Turn on 2-Step Verification. Think of it like the second lock we keep coming back to. Even if a thief has your password, they’d need your actual phone in their hand to get in… and they don’t have that.

One last tip: while you’re in there, glance at your Gmail filters. Sneaky hackers sometimes set up a rule to secretly forward your mail to themselves. Delete anything you didn’t create.

After Recovery: How to Secure Your Account

You made it back inside… now let’s make sure the locks actually hold this time. Getting your account back but leaving the door propped open is like fishing your wallet out of the couch cushions and then setting it right back on the front porch. Do these four things while you’re still fired up about it:

• Turn on two-factor authentication everywhere. Email, bank, social media, all of it. It’s the single best thing standing between you and a repeat headache.
• Give every account its own password. No more using “Buddy2012” on nine different sites. If remembering them all sounds impossible, a password manager does the remembering for you… you just keep track of one master password.
• Clean out the guest list. Go to Settings, then Security, then Apps. If you see some app or website connected to your account that you don’t recognize (or don’t remember from three years ago), revoke it. If you didn’t invite it, show it the door.
• Ask to be told. Switch on login alerts so your account emails or texts you whenever someone signs in from a new device. It’s like a little doorbell camera for your digital life… you’ll know the moment someone comes knocking.

For a deeper walk-through on keeping yourself protected online, our online safety tips for seniors guide is a friendly place to start.

And if the break-in started with a suspicious phone call, it’s worth learning how seniors can avoid voice scams before the next one lands.

Frequently Asked Questions

What should I do first if my account was hacked and the password was changed?

Go to the platform’s account recovery page immediately — for Facebook, visit facebook.com/hacked; for Gmail, visit accounts.google.com/signin/recovery. Use your backup email or phone to verify your identity. If the hacker changed those too, choose the identity verification option.

Can I recover a Facebook account if the password and email were both changed?

Yes. Visit facebook.com/hacked and select “My account is compromised.” If your recovery email and phone were changed, use the Trusted Contacts option (friends who can send you recovery codes) or submit a government ID for manual review by Facebook’s team.

How long does it take to recover a hacked account?

If you have access to your recovery email or phone, most accounts can be recovered in minutes. If manual ID verification is required — common when recovery options were changed — it typically takes 1 to 3 business days for Facebook, Google, and Microsoft to respond.

Should I notify my friends if my Facebook account was hacked?

Yes — immediately. Hackers often use compromised accounts to send scam messages to friends and family asking for money or gift cards. Post a notice on any social account you still have access to, and send a direct message or text to close contacts.

How do I stop my account from being hacked again?

Enable two-factor authentication (2FA) on all accounts — this sends a code to your phone every time someone tries to log in from a new device. Also use a unique password for each account and review which apps have access to your accounts in your security settings.