What to do when an account is compromised
Prioritize account recovery, secure your email, revoke active sessions, and help prevent follow-on scams.
Read guide ↗Practical cybersecurity explainers for individuals, learners, and small organizations. These resources are general education—not emergency response or legal advice.
Prioritize account recovery, secure your email, revoke active sessions, and help prevent follow-on scams.
Read guide ↗Preserve useful evidence, limit further exposure, and identify safer platform and official reporting routes.
Read guide ↗Build a manageable starting point for access control, backups, updates, HTTPS, and email hygiene.
Read guide ↗Understand permission, scope, stop conditions, evidence minimization, and responsible disclosure.
Read guide ↗Guides are periodically reviewed. Always check the latest instructions from a service provider or relevant official authority before acting.
Security tools are powerful. Use training environments, intentionally vulnerable virtual machines, and platforms that explicitly authorize testing. Do not try techniques against a school, employer, ISP, public website, or another person's device without explicit permission.
If you discover a possible weakness in a real service, stop at the minimum necessary evidence and follow the provider's responsible disclosure process. Do not publish private data or exploit instructions that could put users at risk.
Read disclosure guidance ↗