Email is the master key to your digital life. Password resets for your bank, your social media, your shopping accounts — they all flow through your inbox. So when hackers get into your email, everything else is at risk too.
The good news: most email hacks leave clues. Here are the seven warning signs to watch for, and a clear step-by-step recovery plan if the worst has happened.
Sign 1: Password Reset Emails You Didn't Request
Getting a "reset your password" email out of nowhere is the classic red flag. It means someone entered your email address on a site's password-reset form — often as a first step in taking over your accounts. Don't click the link in that email; go to the site directly instead.
Sign 2: Sent Emails You Never Wrote
Check your Sent folder. Spam blasts, strange links sent to your contacts, or replies you never typed mean someone else is using your account. Your contacts are now at risk too, because the messages come from a trusted address — yours.
Sign 3: Login Alerts From Strange Locations
Most email providers show recent login activity. If you see sign-ins from cities or countries you've never visited, especially at odd hours, treat it as a breach. Review this in your account's security or activity page right now — it takes 30 seconds.
Sign 4: Your Contacts Report Spam From You
Sometimes you won't see anything in your Sent folder (hackers delete the evidence), but friends tell you they got weird messages from you. That's just as serious. Believe them, not your empty Sent folder.
Sign 5: Settings Changed Without Your Knowledge
Hackers often set up email forwarding rules so a copy of your mail goes to them silently. Check your forwarding settings, filters, and recovery email/phone number. If anything looks unfamiliar — a recovery address you don't recognize — remove it immediately.
Sign 6: You Can't Log In Anymore
The bluntest sign: your password suddenly doesn't work. This usually means the attacker changed it to lock you out. Act fast — use the account recovery process immediately, because the longer you wait, the more damage they can do.
Sign 7: Security Alerts From Your Provider
Google, Microsoft, and Apple all send alerts about suspicious activity. Don't ignore them or dismiss them as noise. Read every security alert carefully and follow its instructions the same day.
How Hackers Usually Get In
Understanding the attack helps you prevent the next one. The most common entry point is phishing — a fake login page that looks exactly like Gmail or Outlook, reached through a convincing email or text message. You type your real password into a fake site, and the attacker captures it in real time.
The second most common method is password reuse. If you used the same password on a shopping site that later got breached, attackers try that password on email accounts automatically — a technique called credential stuffing. Billions of leaked passwords circulate in these databases, so "nobody would target me" is not protection. Malware on your device and weak recovery questions ("your mother's maiden name") round out the list. Every one of these is fixable with the checklist below.
What to Do Right Now: The Recovery Checklist
Step 1: Change your email password immediately, using a long, unique passphrase you've never used anywhere else. Do this from a device you trust.
Step 2: Turn on two-factor authentication (2FA). This single step blocks the vast majority of future attacks, because a stolen password alone is no longer enough.
Step 3: Review and remove unknown forwarding rules, filters, connected apps, and recovery addresses.
Step 4: Sign out of all sessions everywhere, forcing every device to log in again.
Step 5: Change passwords on your most important accounts — banking, social media, shopping — starting with any that shared the old email password.
Step 6: Warn your contacts if spam went out in your name, so they don't click the malicious links.
Prevent It From Happening Again
Use a password manager so every account gets a unique, strong password. Keep 2FA on everywhere that offers it. And be skeptical of "urgent" emails asking you to log in — always navigate to the site yourself instead of clicking email links. A hacked email is recoverable; a few calm minutes of action make all the difference.
Want to build your own online business for free? Start here — free tools to launch your first funnel, email list, and online course.
