- From a trusted device, change your mailbox password through the Dashboard. If you cannot sign in to the Dashboard, use the Account Access support form.
- Change the password anywhere else you reused it. Keep your new Dashboard and mailbox passwords separate.
- In Webmail, open your initials > My account > Forwards. Remove forwarding addresses you do not recognize.
- Update the password in legitimate email apps for both incoming and outgoing mail.
- Open a support ticket describing the suspicious activity and ask for help reviewing active access and account settings.
A password change should not be treated as proof that every session or application credential has been revoked. Ask support to help review any remaining access. Update your devices and check for malware if appropriate.
If unwanted messages were sent from your address, let affected contacts know through a trusted channel. Do not include passwords or sensitive message contents in your support ticket.
