How to Recover Your Email Account After Being Hacked
If your email account has been compromised — whether you can still log in or you are completely locked out — this guide covers the main recovery pathways available to you. Every email provider handles recovery slightly differently, so the exact steps, options, and terminology will vary depending on your provider. Use this as a general roadmap and adapt it to the options your provider offers.
⚡ Act quickly: The sooner you start the recovery process, the better your chances of regaining access before the attacker can do further damage or lock you out permanently.
Exploring Email Recovery Options
If the attacker has changed your password and you can no longer log in, you will need to go through your provider's account recovery process. The options available to you depend on what recovery methods you set up before losing access.
Option 1: Recovery via phone number or backup email
Most providers will let you receive a verification code via SMS or a backup email address. This is the fastest way back in. Go to your provider's sign-in page, click "Forgot password" or "Can't sign in", and follow the prompts to verify via your recovery phone or email.
Option 2: Security questions or identity verification
Some providers offer security questions as a fallback. Others may ask you to verify your identity by confirming previous passwords, recent email subjects, account creation date, or other personal details. The questions and process vary widely between providers.
Option 3: Contacting support directly
If automated recovery fails — for example, if the attacker has changed your recovery phone and email — you may need to contact your provider's support team. Some providers offer form-based identity verification (e.g., uploading a government-issued ID), while others provide live chat or phone support. Response times and requirements differ significantly.
⚠️ Be patient: Manual identity verification through support can take anywhere from a few hours to several days depending on the provider. Gather any proof of ownership you can: original registration details, recent email activity, payment receipts, or linked phone numbers.
Provider Recovery Pages
Here are direct links to the account recovery pages for the most common email providers. Bookmark yours in case you ever need it:
- Gmail / Google: accounts.google.com/signin/recovery
- Outlook / Microsoft: account.live.com/password/reset
- Yahoo: login.yahoo.com/forgot
- iCloud / Apple: iforgot.apple.com
- Proton Mail: account.proton.me/reset-password
📝 Note: If your provider is not listed here, search for "[your provider name] account recovery" to find their specific process.
What If You Cannot Recover Your Account?
In some cases, recovery may not be possible — particularly if you had no recovery options set up, the provider cannot verify your identity, or too much time has passed. If this happens:
- Create a new email account and begin updating your most important services (banking, social media, subscriptions) to use the new address.
- Warn your contacts that your old address was compromised — they may receive phishing emails from it.
- Search for password reset emails in any other email accounts you have, to identify which services were linked to the compromised address.
- Set up recovery options properly on your new account — recovery phone, backup email, and any other methods your provider offers — so you are not in this position again.
🔒 Starting fresh? Consider a privacy-focused provider like Proton Mail. See our guide on migrating to Proton Mail.