---
metadata:
  - name: generator
    content: Diplodoc Platform v5.50.5
alternate:
  - https://yandex.com/support/id/en/troubleshooting/hacked.md
---
> **Documentation Index:** Fetch the complete configuration index at https://yandex.com/support/id/en/llms.txt

# Someone might have hacked my account

If you notice something strange while using Yandex (for example, friends receive emails from you that you didn't send, or there are certain actions in the [activity history](https://id.yandex.com/security/activity) that you didn't perform), your account may have been hacked.

## Protect your computer from viruses {#antivirus}

If you suspect that your account was hacked, first scan your computer with an antivirus program, for example, the free Dr.Web [CureIt!](https://free.drweb.com/cureit) or [Virus Removal Tool](https://www.kaspersky.com/antivirus-removal-tool) from Kaspersky Lab.

To protect yourself from viruses in the future, install an antivirus and firewall if you haven't yet. You can choose a free antivirus from [our list](https://yandex.com/support/common/security/antiviruses-free.html). Regularly scan your computer for viruses and don't forget to update your antivirus databases.

## Check the access settings and change your password {#acess-settiings}

A hacker who managed to log in to Yandex on your behalf can connect their recovery tools and get access to your account even if you change your password. Follow the instructions below to prevent it.

**If you can't log in to your account**

 
:   [Restore access](https://passport.yandex.com/restoration).  If you aren't able to do this manually, fill out a [Support form](https://yandex.com/support/id/en/support-restore.md).

**If you can log in to your account**

 
:   Make sure that the hacker can't access your account. Change your password:
    
    1. Make sure that there aren't any unfamiliar numbers on the [Phone numbers](https://id.yandex.com/profile/phones) page and that your secure number hasn't been changed or deleted.
        
        [Link](../authorization/phone.md) your phone number to your account if you haven't already. A current phone number provides better account protection than an alternate email address or a security question.
        
    1. Go to the [Email addresses](https://id.yandex.com/profile/emails) page and delete unfamiliar addresses.
        
        Keep in mind that you own all addresses with your username in Yandex domains, such as `<your username>@yandex.com`, `<your username>@yandex.kz` or `<your username>@ya.ru`. These are [aliases](https://yandex.com/support/mail/web/preferences/about-sender/additional-addresses.html#alias) of your email address. You can't delete them.
        
    
    1.If you use an external account to log in to Yandex, make sure that this account isn't compromised, because it can be used to gain access to your Yandex data.
    
    
    1. [Change password](https://passport.yandex.com/profile/access) for your account to block access for those who might know your password.
    1. If you use Android or iOS devices, set up [logging in using a one-time password](../authorization/twofa.md). That's the most secure way to protect your Yandex ID.

## Check your Yandex Mail and Yandex Disk {#mail-and-disk}

If your account was hacked, make sure that there isn't any malicious activity still going on.

**Yandex Mail**

 
:   Check the [visit history](https://yandex.com/support/mail/web/security/security-technologies.html#journal). If Yandex Mail was hacked (someone else visited your account):
    
    1. Go to the **Deleted** folder and [restore emails](https://yandex.com/support/mail/web/letter/delete.html#restore) if necessary.
    1. Check [mail filters](https://yandex.com/support/mail/web/preferences/filters/autosorting.html) and delete suspicious filters.

**Yandex Disk**

 
:   View [event history](https://yandex.com/support/disk/security.html#history). If Yandex Disk was hacked, go to the Trash and [restore deleted files](https://yandex.com/support/disk/missing-files.html#missing-files__restore-from-trash) if necessary.


{% note info %}

If emails and files were deleted, it doesn't necessarily mean that you were hacked. For more information on possible reasons, see [Yandex Mail Help](https://yandex.com/support/mail/web/letter/missing-mail-messages.html) an  [Yandex Disk Help](https://yandex.com/support/disk/missing-files.html#missing-files__why-deleted).

{% endnote %}


For more information on how your account may have been hacked and how to protect it, read [Protect your account](https://yandex.com/support/id/en/security.md).

<div class="cut-button">

{% cut "Contact support" %}

<div style="padding: 15px;
     margin: 10px 0;
     background: #FFFFFF;
     border-radius: 10px;
     border: 1px solid var(--yc-color-line-generic);">
  <iframe style="background: #FFFFFF;"
        height="700"
        width="100%"
        frameborder="0"
        src="https://forms.yandex.ru/surveys/10033347.f47fd6d9da2c25c5848d7431929db7727d84a307/?&iframe=1&lang=en">
  </iframe>
</div>

{% endcut %}

</div>

<!-- source: en/_includes/style-forms.md -->

<!-- endsource: en/_includes/style-forms.md -->