Someone might have hacked my account

  1. Protect your computer from viruses
  2. Check the access settings and change your password
  3. Check your Yandex.Mail and Yandex.Disk

If you notice something strange while using Yandex (for example, friends receive emails from you that you didn't send, or there are certain actions in the activity history that you didn't perform), your account may have been hacked.

Protect your computer from viruses

If you suspect that your account was hacked, first scan your computer with an antivirus program, for example, the free CureIt! by “Dr.Web” or Virus Removal Tool by “Kaspersky Lab”.

To protect yourself from viruses in the future, install an antivirus and firewall if you haven't yet. You can choose a free antivirus from our list. Regularly scan your computer for viruses and don't forget to update your antivirus databases.

Check the access settings and change your password

A hacker who managed to log in to Yandex on your behalf can connect their recovery tools and get access to your account even if you change your password. Follow the instructions below to prevent it.

If you can't log in to your account

Restore access. If you aren't able to do this manually, fill out a Support form.

If you can log in to your account

Make sure that the hacker can't access your account. Change your password:

  1. Make sure that there aren't any unfamiliar numbers on the Phone numbers page and that your secure number hasn't been changed or deleted.

    Link your phone number to your account if you haven't already. A current phone number provides better account protection than an alternate email address or a security question.

  2. Delete unfamiliar addresses on the My email addresses page.

    Keep in mind that you own all addresses with your username in Yandex domains, such as <your username>@yandex.com, <your username>@yandex.kz or <your username>@ya.ru. These are aliases of your email address. You can't delete them.

  3. If you use an external account to log in to Yandex, make sure that this account isn't compromised, because it can be used to gain access to your Yandex data.
  4. Change password for your account to block access for those who might know your password.
  5. If you use Android or iOS devices, set up logging in using a one-time password. That's the most secure way to protect your Yandex ID.

Check your Yandex.Mail and Yandex.Disk

If your account was hacked, make sure that there isn't any malicious activity still going on.

Yandex.Mail

Check the visit history. If Yandex.Mail was hacked (someone else visited your account):

  1. Go to the Deleted folder and restore emails if necessary.
  2. Check mail filters and delete suspicious filters.
Yandex.Disk

View event history. If Yandex.Disk was hacked, go to the Trash and restore deleted files if necessary.

Note. If emails and files were deleted, it doesn't necessarily mean that you were hacked. For more information on possible reasons, see Yandex.Mail Help an Yandex.Disk Help.

For more information on how your account may have been hacked and how to protect it, read Protect your account.