Email Security
Is My Email Compromised? How to Check Safely
An email may be at risk after an unknown login, password reset, changed recovery setting, or exposure match. These signs do not automatically prove access, so verify through the provider, secure the account, and monitor connected services.
What does a compromised email mean?
A compromised email may have an exposed password, an unknown sign-in, or a setting changed without permission. An exposure match alone does not prove that someone accessed the mailbox.
Start with the provider's security page rather than an unexpected message.
- Check recent sign-ins.
- Review recovery settings.
- Do not share codes.
What warning signs matter most?
Look for password changes, unknown devices, forwarding rules, unfamiliar recovery addresses, messages you did not send, or reset requests you did not make.
A location mismatch can be harmless because IP-based locations are approximate, so review the device and time too.
- Unknown session
- Changed recovery email
- Unexpected sent message
What must remain private?
Never enter a current password, authentication code, recovery code, full card number, or bank detail into an exposure checker. Check only identifiers you own or are authorized to manage.
Secure the mailbox
Change the password through the official provider site, use a unique credential, sign out other sessions, and remove unknown devices or connected apps.
- Change the password.
- Sign out everywhere.
- Revoke unknown access.
Review hidden account settings
Check forwarding rules, filters, delegates, recovery methods, app permissions, and automatic replies. Remove changes you did not create and document them first if an investigation may be needed.
- Check forwarding.
- Review delegates.
- Restore trusted recovery methods.
Protect connected accounts
Email can reset other services. Change reused passwords on banking, shopping, social, and work accounts, then enable multifactor authentication wherever available.
- Change reused passwords.
- Enable MFA.
- Monitor financial accounts.
Interpret an exposure result
4safer can show whether an owned email appears in known exposure sources. It cannot prove mailbox access, and a negative result means only that no known match was found in the sources searched.
Frequently asked questions
Does an exposure match prove my email was hacked?
No. It shows known exposure context, not successful access to the mailbox.
What should I secure first?
Secure the email account because it can be used to reset other accounts.
Can a suspicious location be inaccurate?
Yes. Locations may be approximate, so check the device, time, and success status.
Sources
This guide is reviewed against official guidance. External pages may be updated by their respective owners.