How to Check If Your Email Was Hacked (and What to Do Next)

Your email is the master key to your digital life. Password resets for your bank, social media, and shopping accounts all flow through it — which is exactly why hackers love stealing email accounts. The scary part? Most people don't realize their email was hacked until the damage is done.

In this guide, you'll learn how to check if your email was hacked, the warning signs to watch for, and exactly what to do next to take your account back.

Signs Your Email May Have Been Hacked

Hackers usually don't announce themselves. Look for these red flags:

• Password suddenly doesn't work. If your correct password is rejected, someone may have changed it.
• Login alerts from unknown locations. Most providers (Gmail, Outlook, Yahoo) send "new sign-in" alerts. If you see logins from cities or countries you've never visited, take it seriously.
• Sent emails you didn't write. Check your Sent folder for spam or phishing messages sent to your contacts.
• Contacts report strange messages from you. A classic sign — the hacker is phishing your friends.
• Missing emails or mysterious filters. Attackers often create inbox rules that auto-delete or forward your mail so you never see password-reset emails they trigger.
• Recovery info changed. If your backup email or phone number was swapped without your knowledge, someone else controls the account.

How to Check If Your Email Was Hacked

1. Check Have I Been Pwned

Go to haveibeenpwned.com and enter your email address. This free service checks your address against billions of records from known data breaches. If your email appears, it means your password (or a variation of it) was leaked — and attackers may already be trying it.

Important: a "pwned" result doesn't always mean your email account itself was hacked. It means your credentials were exposed somewhere. But if you reused that password on your email, assume the worst and act now.

2. Review Recent Login Activity

Gmail: Scroll to the bottom of your inbox and click "Details" under "Last account activity." You'll see recent sessions with IP addresses and locations. Anything unfamiliar? Click "Sign out all other web sessions" immediately.

Outlook: Go to account.microsoft.com → Security → "View my sign-in activity." Look for unfamiliar locations or devices.

Yahoo: Settings → "Recent activity" shows the same information.

3. Inspect Inbox Rules and Forwarding

This is the step most people miss. Hackers set up hidden rules to forward your mail to themselves or delete security alerts.

Gmail: Settings (gear icon) → "See all settings" → "Filters and Blocked Addresses" and "Forwarding and POP/IMAP." Delete any rule or forwarding address you didn't create.

Outlook: Settings → Mail → "Rules" and "Forwarding." Same check.

4. Check Sent, Trash, and Drafts

Look for messages you didn't send, password-reset emails you didn't request (a sign someone is probing your other accounts), or drafts containing phishing text.

What to Do Next: Take Your Account Back

Found evidence of a hack? Work through these steps in order:

Step 1: Change Your Password — From a Clean Device

If your computer might have malware, change the password from your phone instead. Create a strong, unique password: at least 14 characters, mixing letters, numbers, and symbols. Never reuse it anywhere else. A password manager makes this painless.

Step 2: Turn On Two-Factor Authentication (2FA)

This is the single most effective defense. Even if a hacker has your password, 2FA stops them. Use an authenticator app (Google Authenticator, Authy, or Microsoft Authenticator) rather than SMS codes when possible — SIM-swapping attacks can intercept text messages.

Step 3: Sign Out Everywhere and Revoke Access

Gmail: myaccount.google.com → Security → "Your devices" → sign out unfamiliar devices. Then check "Third-party access" and remove apps you don't recognize.

Outlook/Yahoo: similar options exist under account security settings.

Step 4: Fix Recovery Options

Verify your recovery email and phone number are actually yours. Remove anything unfamiliar. The attacker may have added their own recovery address to get back in later.

Step 5: Check Your Other Accounts

If you reused your email password on other sites (be honest — most people have), change those passwords too, starting with banking, social media, and shopping accounts. This is also the perfect moment to check those accounts on haveibeenpwned.com.

Step 6: Warn Your Contacts

If spam went out from your address, send a brief note to your contacts: "My email was hacked, ignore any strange messages or links from me around [date]." It takes two minutes and protects people who trust you.

How to Stop It Happening Again

• Unique passwords everywhere. A password manager generates and remembers them for you.
• 2FA on every important account — email first, then banking, then everything else.
• Keep software updated. Most malware arrives through unpatched browsers and operating systems.
• Be suspicious of links. Phishing emails are still the number one way accounts get stolen. Check the sender's real address before clicking.
• Run a yearly security checkup. Google and Microsoft both offer guided checkups — set a calendar reminder.

The Bottom Line

Checking whether your email was hacked takes about ten minutes: run your address through Have I Been Pwned, review login activity, and inspect forwarding rules. If something's wrong, change your password from a clean device, enable 2FA, and lock down recovery options.

Your email protects everything else you own online. Treat it like the front door to your house — because to a hacker, that's exactly what it is.