Changing Your Password After a Hack May Not Be Enough

⏱️ Changing your password is a common response to account hacks. Unfortunately, it isn't enough.
⏱️ Changing your password after a hack
After recovering a hacked account and changing the password, immediately verify all recovery information, such as email addresses, phone numbers, and security questions. Ensure everything is yours to prevent the hacker from using them to quickly regain access.
Updates, related links, and more discussion: askleo.com/15053
🔔 Subscribe to the Ask Leo! RUclips channel for more tech videos & answers: go.askleo.com/ytsub
✅ Watch next ▶ Why You - Yes, You - Are a Target of Hackers ▶ • Why You - Yes, You - A...
Chapters
0:00 Changing your password after a hack
0:40 Recovery information
1:45 Billing information
2:14 Secret questions
3:20 Sometimes you get notified
4:00 Between a rock and a hard place
5:10 Prevention
❤️ My best articles: go.askleo.com/best
❤️ My Most Important Article: go.askleo.com/number1
More Ask Leo!
☑️ askleo.com to get your questions answered
☑️ newsletter.askleo.com to subscribe to the Confident Computing newsletter.
☑️ askleo.com/patron to help support Ask Leo!
☑️ askleo.com/all-the-different-... for even more!
#askleo #password #hack

[@askleonotenboom]

✅ Watch next ▶ Why You - Yes, You - Are a Target of Hackers ▶ ruclips.net/video/_Z4VLEuDR8g/видео.html

[@Technological_ko]

Thank you for covering this.

[@davidmartin8211]

If your account was hacked due to a keylogger, then just changing the password and other information is obviously insufficient. In essence, you need to know how the hacker I was able to enter your account in the first place.

[@glasslinger]

Don't forget your security question answers! I lost my ATT account because of that mistake!

[@raylopez99]

You AT&T reps must be tough. When I had my phone stolen, I just presented my Driver's License at the AT&T local phone store, and without them even asking for my passcode they bricked the stolen phone and transferred my new number to another phone. That's all it took.

[@dennisclapp7527]

Thanks Leo

[@davinp]

You should enable 2FA

[@libbyd1001]

For those foolish 'secret questions' - go ahead and use the real answers, so you remember them. But also add some "salt" to them - a word or a few characters either before or after each answer. Keep that info to yourself, of course, then go ahead and use the same word so you always know what it is. This way, even if someone knows the actual answer to the question (thanks to social media or knowing you personally) they will not know what you've added before or after that word. For example, if the question is: "What was your first car?" Instead of simply using "Mustang" (or whatever it was) as your answer, use "jk25Mustang" as your answer. If the next question is: "What is your mother's maiden name?" Instead of using "Smith", use "jk25Smith" instead. You can keep using that same prefix, but always keep that prefix secret.

[@brads2041]

I don't use real answers. I use random words that have nothing to do with the question. I use a password app to track it so I don't have to remember

[@manny7886]

Totally agree. I salted all the passwords that were stored in my password manager. Also, all the answers to the secret questions were stored in the password apps note section.

[@gjoseph1628]

The part discussing association with a credit card I could not understand.

[@gregwessels7205]

There is a possibility a hacker could access your CC info if the site enables enough info to view. My suggestion is to change payment info and watch for unauthorized charges on the card, or request a new one to be safe.