How to Recover a Hacked Email Account (Gmail, Outlook & Yahoo)

Your email account is the master key to your digital life. It's how you reset passwords, receive bank alerts, sign into work tools, and stay in touch with people you trust. So when a hacker gets in, it's not just your inbox they own. It's everything connected to it.

If your email has been compromised, act now. This guide walks you through exactly how to recover a hacked email account on Gmail, Outlook, and Yahoo, and what to do afterward to make sure it never happens again.

Signs your email account has been hacked

Before jumping into recovery, it helps to know what you're dealing with. Here are the most common warning signs that your account has been taken over:

• Emails in your Sent folder you didn't write. Hackers often send spam or phishing messages from your account and then delete the evidence.
• Your password no longer works. One of the first things an attacker does is change your credentials to lock you out.
• Friends or colleagues report strange messages from you. Your contacts may receive suspicious links or requests that look like they came from your email.
• Unexpected password reset emails. If you're getting reset notifications you didn't request, someone is testing access to your account and its linked services.
• Unknown login locations or devices. Most email providers show recent login activity. If you see a city or device you don't recognize, that's a red flag.
• Your recovery email or phone number was changed. Attackers modify recovery options to prevent you from reclaiming the account.
• Email forwarding rules you didn't set. Hackers sometimes set up silent forwarding so they can keep reading your emails even after you change your password.
• Two-factor authentication (2FA) prompts you didn't trigger. If your phone buzzes with a 2FA code you didn't request, someone has your password.

Act fast: what to do in the first 5 minutes

Time is critical. The longer a hacker has access, the more damage they can do, from resetting your bank password to locking you out entirely.

Do these immediately:

1. Try to log back in. If you still have access, change your password right now.
2. Check your account's active sessions and sign out all other devices.
3. Remove any unfamiliar recovery emails or phone numbers.
4. Notify your contacts not to click any unusual links they may have received from you.
5. Check linked accounts (banking, social media, work apps) for suspicious activity.

How to recover a hacked Gmail account

Gmail is the world's most popular email service, which also makes it a prime target. Here's how to get your account back.

Step 1: Go to Google's account recovery page

Visit accounts.google.com/signin/recovery and enter your email address. Google will walk you through verifying your identity.

Step 2: Verify your identity

Google offers several verification methods:

• A code sent to your recovery phone number or email
• Answering your security questions
• Confirming a previous password you used
• Using a trusted device you've signed into before

The more account detail you can provide (previous passwords, approximate account creation date, devices used), the better your chances of getting back in.

Step 3: Regain access and secure your account

Once Google verifies you, you'll be prompted to set a new password. After regaining access:

• Change your password to something strong and unique.
• Go to Security > Recent security events and review any unfamiliar activity.
• Remove unknown recovery emails or phone numbers under Security > Ways we can verify it's you.
• Check Data & Privacy > Third-party apps for unauthorized connections.
• Turn on 2-Step Verification if it isn't already active.
• Review Gmail Filters and Forwarding settings (Settings > See all settings > Filters and Blocked Addresses / Forwarding and POP/IMAP) for any rules you didn't create.

Step 4: Report the hack to Google

If the standard recovery flow doesn't work, visit support.google.com/accounts/troubleshooter/2402620 to contact Google's support team directly.

How to recover a hacked Outlook (Microsoft) account

Microsoft accounts power Outlook email, Xbox, OneDrive, and more, so a breach here can cascade quickly.

Step 1: Go to Microsoft's account recovery page

Visit account.live.com/acsr and enter the email or phone number tied to the account.

Step 2: Verify your identity

Microsoft will try to send a verification code to your recovery contact. If the hacker already changed your recovery info, select "I don't have any of these" and fill out the account recovery form. Provide as much detail as possible: previous passwords, account creation date, recent emails you remember sending, and billing info if applicable.

Microsoft reviews these requests manually. Response can take 24 to 48 hours, so be as specific as possible. Vague submissions are often denied.

Step 3: Secure your Microsoft account

After regaining access:

• Change your password immediately.
• Go to Security > Advanced Security Options and review recent activity.
• Remove any unfamiliar addresses or phone numbers from recovery options.
• Turn on Two-step verification or set up the Microsoft Authenticator app.
• Check Connected apps & services for third-party apps you don't recognize.
• Review any email rules that may have been created in Outlook.

How to recover a hacked Yahoo Mail account

Yahoo Mail remains one of the most widely used email platforms, and one of the most targeted.

Step 1: Use Yahoo's Sign-In Helper

Go to login.yahoo.com/forgot and enter your Yahoo email address or phone number. Yahoo's Sign-In Helper will guide you through the process.

Step 2: Verify your identity

Yahoo will try to reach you via a recovery phone or email. If those options are gone because the hacker changed them, select "I don't have access to these" and use Yahoo's Account Recovery form. Provide your name, previous passwords, account creation date, and any linked phone numbers or emails you've used in the past.

Step 3: Secure your Yahoo account

Once you're back in:

• Change your password right away.
• Go to Account Security and remove any unfamiliar recovery contacts.
• Review Recent Activity to see what was accessed.
• Turn on Two-step verification using the Yahoo Account Key or an authenticator app.
• Check your Filters for any forwarding rules you didn't set up.

What to do after recovering your email account

Recovering access is only step one. Here's what you need to do to fully regain control and stop it from happening again.

Change passwords on every linked account

Your email is the master key. If a hacker had it, they may have already accessed other accounts. Change passwords on banking and financial apps, social media accounts, work email and collaboration tools, streaming services, and e-commerce accounts like Amazon and PayPal. Use a password manager to generate and store strong, unique passwords for each one.

Enable two-factor authentication (2FA) everywhere

With 2FA active, even a stolen password isn't enough to get in. Enable it on your email, banking, and social media accounts at minimum. Use an authenticator app rather than SMS where you can. SIM-swapping attacks can intercept text message codes.

Check for data breaches

Your credentials may have been exposed in a breach that gave hackers your password in the first place. Guardio's Identity Breach Monitoring scans the dark web and data breach databases continuously, alerting you the moment your email appears in a leak so you can act before damage is done.

Scan your browser and devices

Email accounts are often compromised through phishing sites, malicious browser extensions, or malware. Even after changing your passwords, if malware is still on your device, you're still at risk. Guardio detects and blocks phishing attempts, malicious websites, and harmful extensions in real time, across your browser and phone.

Review app permissions

Revoke access to any third-party apps connected to your email that you don't recognize or no longer use. Attackers sometimes install OAuth-connected apps that maintain access even after a password change.

Alert your contacts

Let your email contacts know your account was compromised. Warn them not to click suspicious links or respond to unusual requests they may have received from your address.

How to prevent your email from being hacked in the future

The best recovery is one you never need. Follow these practices to keep your email secure going forward.

Best practiceWhy it mattersUse a long, unique passwordShort or reused passwords are cracked in secondsEnable 2FA on all accountsBlocks the vast majority of automated account takeover attacksNever click suspicious email linksPhishing is the leading way accounts get compromisedKeep your recovery info up to dateLets you verify your identity and reclaim access quicklyUse a password managerRemoves the temptation to reuse weak passwordsMonitor for data breachesGet early warning before hackers act on your credentialsUse a browser security toolBlocks phishing and malware before your credentials are ever entered

How Guardio helps keep your email account safe

Email account compromise doesn't always start in your inbox. It often starts in your browser. A single click on a phishing link can hand your credentials to a hacker before you even realize something's wrong.

Guardio protects you on multiple fronts:

• Real-time phishing detection. Blocks malicious websites and fake login pages before you enter your credentials, across your browser and phone.
• Identity breach monitoring. Continuously scans for your email in data breach databases and dark web leaks, alerting you instantly.
• Email security. Flags phishing emails that slip past your inbox's spam filter, on both your phone and your computer.
• Malicious extension detection. Identifies and removes harmful browser extensions that can steal your data.
• Safe browsing. Flags dangerous links in emails, social media, and search results before you click.

Recovering from a hacked email is stressful and time-consuming. Guardio's proactive protection means you spend less time recovering, and more time feeling secure.

Get a free security scan with Guardio today and stay protected from phishing and account takeovers.

Conclusion

A hacked email account is serious, but it's recoverable. The key is acting fast, locking things down thoroughly, and not stopping at the inbox. Once you've regained access, secure every account that was connected to it, turn on 2FA, and put tools in place that catch threats before they reach you.

Guardio works quietly in the background across your browser and phone, detecting the phishing attempts and malicious extensions that lead to account takeovers in the first place. Get started with a free scan and protect your inbox before hackers get the chance.