Secure the account

Change the password immediately, from a device you trust.

Change the password

Use a long, unique password — not one you've used elsewhere.

Enable MFA

Turn on multi-factor authentication if it isn't already on.

Check active sessions

Log out any devices or sessions you don't recognise.

Check recovery information

Confirm your recovery email and phone number are still yours.

Review account activity

Look for changes, messages, or purchases you didn't make.

Warn contacts if necessary

Let close contacts know, in case the account was used against them.

Contact the service provider if necessary

If you can't regain access yourself, use official support.