Recover access. Then review control.
- 01
Mailbox
Secure the mailbox associated with your account.
What this tells youThe linked mailbox is under your control.
If the mailbox is also compromised, use its provider’s recovery route. An account reset is not useful if someone else still receives its messages.
- 02
Recovery
Open the official recovery route on a device you used before.
What this tells youYou are using the owner’s official recovery process.
Use a familiar device where possible. Keep a working session available while you understand the recovery choices.
- 03
Security review
After access returns, review your account’s security settings.
What this tells youThe incident has a follow-up, not just a new login.
Review unfamiliar sessions, your linked contact details and the security options the account offers.
Separate a warning from evidence.
| What changed | Owner’s check | Do not assume |
|---|---|---|
| Messages you did not send | Record the conversation and timing; review your account access. | Deleting the messages resolves the access problem. |
| An unfamiliar session | Compare the device, time and your own recent use. | A location label identifies a particular person. |
| Changed contact details | Review the account’s recovery information through the official route. | A password change also corrects every account setting. |
Keep the incident context.
If messages were sent while you were away, record what changed before deleting evidence.
The example shows why context matters. It does not diagnose account access from a chat alone.
After access returns, finish the review.
Three things to verify
Confirm the linked email and other recovery details belong to you.
Review the device list. Read the sign-out prompt before ending a session you may still need for recovery.
Check it separately. Account recovery does not automatically establish that all old messages are restored.
Know which session you are ending and how you will sign in again. If it is the only device with readable history, assess storage recovery first.
Keep this boundary.
Do not send passwords or recovery codes to someone offering remote access.
Keep account recovery with its owner and the official service. A simulated chat feed is not proof of access or recovery.
References and current instructions
Go to the source.
Device labels and feature availability can change; use the current official page before taking action.
Official owner-account recovery guidance; a familiar device can help.
Official account and contact-management topics.