How to Know if You've Been Hacked

Co-authored by Luigi Oppido and Jack Lloyd

Last Updated: July 28, 2022 References Tested

Scanning for Malware

|

Checking Website Activity

|

Viewing Apple Sign-ins

|

Viewing Google Sign-ins

|

Viewing Facebook Sign-ins

|

Video

|

Expert Q&A

This wikiHow teaches you how to recognize signs that your computer or account has been hacked, as well as how to take proactive steps to prevent further hacking. Keep in mind that the bulk of modern "hacking" involves either stealing computer or account information, or installing malware on your computer.

Method 1

Method 1 of 5:

Scanning for Malware

1
Look for unusual activity. While the cause of computer problems can range from temperature to a corrupted hard drive, the following may indicate that your computer was hacked:^{[1]
X
Research source}^{[2]
X
Trustworthy Source
Federal Trade Commission
Website with up-to-date information for consumers from the Federal Trade Commisson
Go to source}
- Your computer slows down, crashes, or displays repeated error messages.
- Your computer won't shut down or restart when you tell it to.
- Your computer displays a lot of pop-ups.
- Your computer's settings have changed drastically without your input.
- Some websites that you visit have inappropriate adds, or advertisements appear on websites that you don't expect them to be on, such as government websites.
- You cannot remove unwanted software.
- Suspicious emails or messages are sent to your friends.
- Some of your external devices (such as cameras, microphones, or GPS devices) seem to be powered on even when you are not using it.
2
Look for other standard malware. Here are some other things that might occur when hacked:
- Browser toolbars which you didn't add appear.
- System or browser settings have been changed.
- Your laptop battery drains faster than it should.^{[3]
  X
  Research source}^{[4]
  X
  Trustworthy Source
  Federal Trade Commission
  Website with up-to-date information for consumers from the Federal Trade Commisson
  Go to source}
Advertisement
3
Check for intruders on your Wi-Fi network. Both Windows and Mac computers come with built-in ways to determine whether or not your Wi-Fi network is entertaining extra guests:
- Windows
  - Open Start
  - Type in view network computers and devices
  - Click View network computers and devices^{[5]
    X
    Research source}
  - Look for unusual items (the "ROUTER" item is your Wi-Fi router).
- Mac
  - Open Finder or click the desktop.
  - Click Go
  - Click Network
  - Look for unusual items.
4
Remove the viruses. If you determine that your computer or smartphone has been hacked, there are a few things that you can do to prevent the hacking from continuing and minimize the fallout from the hacking itself:
- Stop shopping, banking, or doing other activity on the internet.
- Update your antivirus software.
- Restart your computer into Safe Mode (skip this step on mobile):
  - Windows
  - Mac
- Remove any recently installed programs.
- Restart your computer.
- Scan your computer with your antivirus software. You may want to use multiple antivirus programs to scan your computer.^{[6]
  X
  Trustworthy Source
  Federal Trade Commission
  Website with up-to-date information for consumers from the Federal Trade Commisson
  Go to source}
- If you're still unsure, then you can reset your computer.
5
Prevent future hacking. You can revoke a hacker's access to future data by doing the following:
- Install antivirus software. Windows 10 comes with antivirus software called Microsoft Defender.
- Update your computer. Keep your programs up to date, and don't defer or disable Windows Update.
- Pay attention to security warnings. They are there for a reason. Don't ignore them.
- Don't click links or open unusual attachments in emails. Type the link directly into your browser, and ask the person who sent the email if they were the one who sent it to you.
- Only download software from the company’s website. For example, Adobe Reader should only be downloaded from Adobe.com.
- Scan USB drives before using them. Most antivirus software does this automatically, but it doesn't hurt to run a manual scan.
- Back up your data. Once a week, copy your data to an external drive, then disconnect the drive. This will protect your data from ransomware.
  - You can also back up your data to the cloud.^{[7]
    X
    Trustworthy Source
    Federal Trade Commission
    Website with up-to-date information for consumers from the Federal Trade Commisson
    Go to source}
6
Follow up on some new information on hacking forums so that way you can be informed about new ways you can be hacked.
7
Read the privacy policy of the social networks you are using. They would never contact you via some weird email address and for sure they would never ask you about your password because if they were legit, they would possess all the information about your profile already.
8
Use double authentication everywhere! It will create an extra barrier that makes it harder for hackers to get past.
9
Contact the Support desk of the company, in cases of getting false mail and tell them all about it. Never go head first..don't be superstitious!# Follow up on some new information on hacking forums so that way you can be informed about new ways you can be hacked.
10
Read the privacy policy of the social networks you are using. They would never contact you via some weird email address and for sure they would never ask you about your password because if they were legit, they would possess all the information about your profile already.

Method 2

Method 2 of 5:

Checking Website Activity

1
Attempt to log into your account. Go to the login page for the account that you suspect was hacked and attempt to log in with your email address/username/phone number and password.
- If your account password won't work and you didn't change your password, look for a password reset email from the account. You can usually reset your password, and secure your account from such an email.
- Unfortunately, if you can't log into your account and your email address isn't accessible, the only thing that you can do is report the account as hacked to the company or service to which the account belongs.
2
Look for irregular activity on your account. Irregular activity may include anything from messages or posts that you didn't create to radically different account settings.
- On social media, you may also find that you're following different accounts or that your bio has changed.
3
Pay attention to any recent messages. On platforms like Facebook, a common hacking method involves a friend "sending" a link to you; if you click the link, it will be forwarded from your messenger to other friends or contacts on the platform.
- If you see people responding to you even though you didn't send a message, you may have been hacked.^{[8]
  X
  Research source}
- Avoid clicking links from anyone you don't trust, and verify the contents of links with people you do trust before opening the links.^{[9]
  X
  Research source}
4
Check the "Have I Been Pwned" website. This website hosts a list of sites which have had their information stolen over recent years. Go to https://haveibeenpwned.com/PwnedWebsites and scroll through the list of websites there; if you see a website on which you have an account, look at the details of the hack.
- If the hack took place well-before you created your account, you're probably fine.
- If the hack took place any time after you created your account, change your password for the website and any connected services (e.g., your email address) immediately.
- A staggeringly large number of high-profile websites such as Sony and Comcast are on the "Have I Been Pwned" list, so the chances that you have at least one potentially compromised account are high.
5
Prevent future complications. To both avoid getting hacked in the future and minimize the damage if you do get hacked, consider doing the following:
- Enable 2-factor authentication (which verifies that you're logging into your account by sending a text message to your phone) on any available platforms.
- Never use the same password twice (e.g., use a different password for each of your accounts).^{[10]
  X
  Research source}
- Change your password immediately if you ever accidentally leave your account logged in on a shared computer, smartphone, or tablet.

Method 3

Method 3 of 5:

Viewing Apple Sign-ins

1
Open the Apple ID website. Go to https://appleid.apple.com/ in your computer's web browser.
- From this site, you can see a list of items on which you're signed into your Apple ID. If you see an option that you don't recognize, you can sign out of it and then change your password.
2
Log into your Apple ID account. Enter your Apple ID email address and password in the text fields that are in the middle of the page, then press ↵ Enter.
3
Verify your login. Depending on your account settings, you'll either have to answer a security question or use your iPhone to retrieve a 2-factor authentication code.
4
Scroll down to the "Devices" section. You'll find this option near the bottom of the page.
5
Review the list of sign-in locations. In the "Devices" section, you'll see a list of places (e.g., computers, smartphones, etc.) in which you're logged into your Apple ID.
6
Sign out of a platform. if you don't recognize a location here, you can sign out of your Apple ID on the platform by clicking the location's name and then clicking Remove in the resulting drop-down menu.
7
Change your password. If you had to sign out of an unknown platform, you should change your Apple ID password immediately. This will prevent future hacking.
- Be sure to use a password that's unique to your Apple ID.

Method 4

Method 4 of 5:

Viewing Google Sign-ins

1
Open your Google account page. Go to https://myaccount.google.com/ in your computer's web browser.
- This method allows you to see a list of places where your Google account is currently signed in. If you see an option that you don't recognize, you can sign out the account and change your password.
2
Click Device activity & security events. You'll find this link below the "Sign-in & security" heading on the left side of the page.
- If you aren't logged into your Google account, you'll be prompted to log in before you can proceed.
3
Click REVIEW DEVICES. It's on the right side of the page, just below the "Recently used devices" heading.
4
Review your login locations. Each item on this page is a location on which you're signed into your Google account.
5
Sign out of a platform. If you see a platform that you don't recognize (e.g., a computer), click the platform's name, click the red REMOVE button, and click REMOVE when prompted.
6
Change your password. If you had to sign out of an unknown platform, you should change your Google account password immediately. This will prevent future hacking.
- Be sure to use a password that's unique to your Google account.

Method 5

Method 5 of 5:

Viewing Facebook Sign-ins

1
Open Facebook. Go to https://www.facebook.com/ in your computer's web browser. This will open your Facebook News Feed if you're logged in.
- If you aren't logged in, enter your Facebook email address and password before proceeding.
- This method allows you to see a list of places where your Facebook account is currently signed in. If you see an option that you don't recognize, you can sign out the account and change your password.
2
Click the "Menu"
icon. It's a triangle in the upper-right side of the page. A drop-down menu will appear.
- On some browsers, this icon resembles a gear instead.
3
Click Settings. It's in the drop-down menu.
4
Click Security and Login. You'll find this tab in the upper-left side of the page.
5
Click See More. It's at the bottom of the "Where You're Logged In" section. Doing so brings up a list of all of the locations in which you're logged into your Facebook account.
6
Review the login locations. Each of the platforms and locations listed here pertains to a specific Facebook login.
7
Sign out of a platform. If you see an unfamiliar login location, click ⋮ to the right of the location and click Log Out.
- You can also click Not You? and follow the on-screen prompts to report the incident to Facebook.
8
Change your password. If you had to sign out of an unknown platform, you should change your Facebook account password immediately. This will prevent future hacking.
- Be sure to use a password that's unique to your Facebook account.

Expert Q&A
Did you know you can get expert answers for this article? Unlock expert answers by supporting wikiHow

Question

How do I know if I've been hacked?

Luigi Oppido
Computer & Tech Specialist
Luigi Oppido is the Owner and Operator of Pleasure Point Computers in Santa Cruz, California. Luigi has over 25 years of experience in general computer repair, data recovery, virus removal, and upgrades. He is also the host of the Computer Man Show! broadcasted on KSQD covering central California for over two years.

Luigi Oppido

Computer & Tech Specialist

Expert Answer

Support wikiHow by unlocking this expert answer.

One sign that you've been hacked is if all of a sudden you start to see your inbox flooded with repetitive emails. However, if you change your password, you'll lock the hacker out of your account. To check whether your email address has been included in a data breach, visit a site like haveibeenpwned.com. They'll tell you whether your data has been exposed, as well as which sites may have been involved in the breach. Another way you might be able to tell whether you've been hacked is if you start to see fraudulent charges on your bank statements or credit cards. To prevent that, sign up for alerts that will inform you every time a purchase is made on one of your accounts.
Question

Is it normal for a message to display saying that the latest update is being installed and to not close the PC?

Community Answer

Yes, that's normal. Corruption of data can happen if you shut down the PC during an update.
Question

If my computer has a camera, can they see me?

Community Answer

It's entirely possible, yes. If you're worried about this, cover your computer's webcam with a sticky note when not in use.