How do I secure a phone and accounts after a suspected hack?
Answer
Treat this as an account takeover risk: secure the main email first, reset passwords from a clean device, turn on two-factor authentication, then update sensitive accounts like Experian, banking, and Verizon. Do not keep using an old compromised email as the recovery address for important services.
Before you start: stop right away if…
- Stop if a site or popup asks you to pay to unlock an account or install unknown remote-access software.
- Factory resetting a phone erases local data unless it is backed up first.
Follow these steps
Recover the primary email on a clean device
On a different trusted device, open Google Account Recovery from the official Google sign-in page. Recover the main Gmail or Google account used on the phone before changing other services.
You should see: You regain access to the primary email, or Google clearly shows which recovery methods are still available.
Reset the email password and enable 2-Step Verification
Change the email password, then turn on 2-Step Verification with a passkey, security key, or authenticator app when offered. Remove unknown devices from the Google Account security page.
You should see: The email account requires a new password plus a second factor, and unfamiliar sessions are signed out.
Restore app access with the secured email
Try signing into apps such as Experian, Zepp, or Experience with the same email used before the reset. If login still fails, use each app’s official password reset only after the email inbox is secured.
You should see: Apps accept the restored email, send a reset link, or show a clear error if a new account is required.
Update sensitive account recovery contacts
For Experian, banking, Verizon, and similar accounts, change passwords and, where allowed, switch the recovery email to a different trusted address that was not involved in the suspected hack.
You should see: Sensitive accounts no longer depend only on the compromised or disputed email address.
Review the phone itself
On the Android phone, review installed apps, device admin permissions, and Google account devices. Uninstall unknown apps and consider a factory reset only after backing up needed data and confirming you can sign back into the secured accounts.
You should see: Unknown apps or sessions are removed, or the phone is reset and set up again with the secured accounts.
Not sure this is the right page? Check here
0 of 5 checked
Extra tips
What to look for: Messages such as incorrect email, prompts to start a new Verizon line or account, and failed sign-ins in apps that still expect an old email address.
Before you change anything: Use a different trusted phone or computer if the current phone may still be compromised. Write down which email addresses and services still work. Have recovery phone numbers nearby if known. Never share passwords or one-time codes with unexpected callers.