Someone might have hacked my account

If you notice something strange when working with Yandex (for example, a friend got an email from you that you never sent, or you see unfamiliar sites or programs in your sign-in history), your account might have been hacked.

Protect your computer from viruses

If you suspect that your account was hacked, first scan your computer with an antivirus program, like the free CureIt! by “Dr.Web” or Virus Removal Tool by “Kaspersky Lab”.

To protect yourself from viruses in the future, install an antivirus and firewall if you haven't yet. You can choose a free antivirus from our list. Regularly scan your computer for viruses and don't forget to update your antivirus databases.

Check the access settings and change your password

A hacker who managed to log in to Yandex on your behalf can connect their recovery tools and get access to your account even if you change your password. Follow the instructions below to prevent this from happening.

If you can't log in to your account

Restore access. If you aren't able to do this manually, fill out a Support form.

If you can log in to your account

Make sure that the hacker can't access your account. Change your password:

  1. Make sure that there aren't any unfamiliar numbers on the Phone Numbers page and that your secure number wasn't changed or deleted.

    Link your phone number to your account if you haven't already. A current phone number provides better account protection than an alternate email address or a security question.

  2. Go to the Email addresses page and delete unfamiliar addresses.

    Keep in mind that you own all the addresses with your username on Yandex domains, for example <your username>@yandex.com, <your username>@yandex.kz, and <your username>@ya.ru. These are aliases of your email address. You can't delete them.

  3. If you log in to Yandex using your social network account, make sure that your account was not hacked; hackers can get access to your Yandex data through Facebook, VK, etc.
  4. Change password for your account to block access for those who might know your password.
  5. If you use Android or iOS devices, set up two-factor authentication, which is the most secure way to protect your Yandex ID.

Check your Yandex.Mail and Yandex.Disk

If your account was hacked, make sure that there isn't any malicious activity still going on.

Yandex.Mail

Check the visit history. If Yandex.Mail was hacked (someone else logged in to your account):

  1. Go to the Deleted folder and restore emails if necessary.
  2. Check mail filters and delete suspicious filters.
Yandex.Disk

View event history. If Yandex.Disk was hacked, go to the Trash and restore deleted files if necessary.

Note. If emails and files were deleted, it doesn't necessarily mean that you were hacked. For more information on possible reasons, see Yandex.Mail Help and Yandex.Disk Help.

For more information on how your account may have been hacked and how to protect it, read Protect your account.