A Yahoo Mail hack is often noticed when contacts receive strange messages from your address or when your password suddenly stops working. Because email can reset other accounts, secure Yahoo first and then check what else may have been touched.
Does this affect you?
Use this for Yahoo Mail on the web, the Yahoo Mail app, or email apps connected to Yahoo when sent messages, recovery details, filters, or login behavior look suspicious.
If you can still log in
Secure the account immediately before doing deeper cleanup.
- Go to login.yahoo.com and sign in.
- Open Account Info > Account security.
- Change the password to a long, unique password not used anywhere else.
- Review Recent activity and Recovery methods for unfamiliar devices, phone numbers, alternate emails, or security questions. Remove anything that is not yours.
- Open Yahoo Mail Settings > Filters and remove filters that auto-forward, archive, or delete incoming mail without your knowledge.
- Check the Sent folder for messages you did not write.
- Search the mailbox for password reset emails from banks, shopping sites, social media, or other accounts that may also need attention.
If you are locked out
Use Yahoo recovery and be wary of anyone asking for the password itself.
- On the Yahoo sign-in page, choose Forgot password.
- Use a verification code sent to the recovery phone or alternate email if either still belongs to you.
- Set a new password after the code is accepted.
- If the recovery methods were changed, choose I do not have access to these and follow Yahoo’s account recovery form.
- Provide ownership details such as account creation information, folder names, contacts you regularly email, or other history Yahoo asks for.
- After access returns, change the password, remove suspicious recovery methods, check filters, and review sent mail.
More control
Enable two-step verification
Account Info > Account security > Two-step verification adds a second sign-in step, such as SMS or an authenticator app, so a stolen password is not enough.
Review app access
Check Manage app passwords and Connected apps and websites. Remove anything you do not recognize or no longer use.
Keep recovery details current
An outdated recovery phone or alternate email is one of the main reasons a hacked Yahoo account becomes difficult to recover.
Warn contacts and fix reused passwords
If scam messages went out, tell recent contacts to ignore them. If the Yahoo password was reused anywhere else, change it there too.
Sources
- Yahoo Help – Recover your Yahoo Account (2025)
- Yahoo Help – Someone is using my Yahoo account without my permission (2025)
- Yahoo Help – Turn on two-step verification (2025)