What to Do If Your Email Is Hacked
Quick action steps to secure your email account if it's been compromised.
Signs Your Email Is Hacked
- You can't log in with your password
- Emails in your sent folder you didn't send
- Friends receiving spam from your account
- Password reset emails you didn't request
- Your contacts report strange emails from you
Immediate Actions (Do These NOW)
Step 1: Change the Mailbox Password
- If you can still sign in to the control panel:
- Go to system.atriomail.com
- Open Email Mailboxes and click the affected mailbox
- Use the Reset Password action
- Create a strong, unique password, then update it in every mail app and device
- If you can't sign in:
- Contact support through the live chat
- We'll help you regain access during business hours
- At least 12 characters
- Mix of letters, numbers, symbols
- Not used anywhere else
- Not related to personal info
Step 2: Check Email Settings
Attackers often change settings to keep access:
- In the control panel, check Email Forwarders and Email Catch-All for entries on your domain you did not create
- In your webmail at system.atriomail.com/webmail or your mail app, look for filters, redirect rules, a vacation or auto-reply message, and a changed signature
- Remove anything you did not set up yourself
Step 3: Review Account Activity
- Check sent emails for spam
- Look for deleted emails (check trash)
- Check whether any mail was moved or archived out of the inbox
Step 4: Scan for Malware
- Run a full antivirus scan on your computer
- Check your phone for suspicious apps
- Update all software and operating systems
Secure Other Accounts
If you used the same password elsewhere:
- Change passwords on all accounts immediately
- Prioritize:
- Banking and financial accounts
- Social media
- Shopping sites
- Work email
Two-Factor Authentication on the Control Panel
Signing in to the control panel always needs a second factor: a code from an authenticator app, or a code sent by email. You set this up on the Two-Factor Auth page.
Two-factor authentication covers the control panel only. Webmail and mail apps sign in with the mailbox password, so that password is the protection there: make it long, unique, and change it as soon as you suspect a problem.
Notify Your Contacts
Let people know your account was compromised:
- Send an email to your contacts
- Warn them about potential spam from your account
- Tell them not to click links in recent emails
- Apologize for any inconvenience
Sample Message:
Monitor Your Account
For the next few weeks:
- Check your sent folder daily
- Check your forwarders and webmail rules now and then
- Watch for unusual emails
- Monitor your bank statements
Prevent Future Hacks
Use Strong Passwords
- 12+ characters
- Unique for each account
- Use a password manager
Enable Security Features
- Keep two-factor authentication set up for the control panel
- Use a separate, strong password for each mailbox
- Remove mailboxes and forwarders you no longer use
Stay Vigilant
- Don't click suspicious links
- Verify sender addresses
- Keep software updated
- Use antivirus software
- ☐ Mailbox password changed everywhere
- ☐ Forwarders, catch-all and webmail rules reviewed
- ☐ Malware scan completed
- ☐ Other accounts secured
- ☐ Contacts notified
Need Help?
If your account has been compromised, contact our support team through the live chat in the control panel. Support is available during business hours.