You cannot and should not try to hack someone else's email

If you are looking for ways to break into someone else's email account, stop here. Accessing another person's email without permission is a federal crime under the Computer Fraud and Abuse Act, punishable by up to ten years in prison and fines up to $250,000. State laws add additional penalties. No circumstance — not anger, not suspicion, not a relationship dispute — makes this legal.

If you believe someone has committed a crime against you or someone else, report it to the FBI's Internet Crime Complaint Center (IC3) at ic3.gov or to your local police department. If you are locked out of your own email account, the sections below explain how to regain access through the legitimate recovery process your email provider offers.

Key Takeaways

  • Hacking into anyone's email account is a federal crime with prison time and heavy fines, regardless of your reason.
  • If your own email is compromised, use your email provider's official account recovery tools, which require proof you own the account.
  • If you suspect someone else's account has been hacked, report it to the email provider and to law enforcement, not by attempting access yourself.
  • Email providers like Gmail, Outlook, and Yahoo have specific recovery processes that work faster than any other method.

How to recover your own hacked email account

If someone else has taken control of your email, your email provider has a recovery process built for exactly this situation. Go to the login page of your email service — Gmail, Outlook, Yahoo, or whichever you use — and look for a link that says "Can't access your account" or "Forgot password." Click it.

The provider will ask you to prove you own the account. This usually means entering a phone number or backup email address you set up when you created the account. If you still have access to that phone or email, you will receive a code to reset your password. If you do not have access to either, the provider will ask security questions you answered during setup, or will ask you to verify recent activity on the account.

This process takes minutes to hours. Do not pay anyone claiming they can speed it up — legitimate recovery is free and comes directly from your email provider, never from a third party.

What to do when ready after you regain access

Once you are back in your account, change your password to something long and random — at least 16 characters, mixing letters, numbers, and symbols. Do not reuse a password you have used anywhere else.

Check your account recovery options. In Gmail, this is under Security settings; in Outlook, under Account settings; in Yahoo, under Account info. Make sure the phone number and backup email listed are ones only you can access. Remove any recovery methods you do not recognize.

Review your connected apps and devices. Hackers often leave a backdoor by connecting their own device to your account. In Gmail, this is "Manage your Google Account" then "Security" then "Your devices." In Outlook, go to "Security" then "Device security." Remove anything you do not recognize. Change passwords for any accounts that share the same email address, starting with your bank and any financial services.

If someone else's email has been hacked

You cannot help them by trying to access their account yourself — that would make you a criminal too. Instead, tell them to follow the recovery steps in the section above. If they cannot access their own recovery methods, they should contact their email provider's support team directly by phone or through the provider's official website.

If the hacked account belongs to a business, a public figure, or a minor, report it to the email provider and to the FBI's IC3 at ic3.gov. Include any evidence you have of the compromise — screenshots of unusual activity, emails sent from the account that the person did not write, or changes to account settings.

Why hacking is not a solution even when you think you have a good reason

People sometimes consider hacking an email when they are locked out of a shared account, suspect infidelity, want to monitor a child, or believe someone is impersonating them. None of these reasons are legal justifications.

If you share an account with someone and cannot access it, ask them for the password or to add you as an authorized user. If you suspect your child is in danger, contact local police or child protective services — they have legal tools to investigate. If someone is impersonating you, report it to the email provider and to the FBI. If you suspect infidelity, consult a lawyer about what you can legally do in your state; in many places, even spouses cannot legally access each other's private accounts.

The legal route is slower but it is the only one that does not end with you facing criminal charges.

How to prevent your email from being hacked in the first place

Use a password manager like Bitwarden, 1Password, or Dashlane to generate and store a unique password for every account. This means if one service is breached, hackers cannot use that password to break into your email or other accounts.

Turn on two-factor authentication (2FA) on your email account. This means even if someone has your password, they cannot log in without a code from your phone or a security key. Gmail, Outlook, and Yahoo all offer this under their security settings. A physical security key like a YubiKey is stronger than a code sent by text, but text-based 2FA is far better than nothing.

Do not click links in emails asking you to verify your password or account details. Legitimate companies never ask you to confirm sensitive information by email. If you receive such an email, go directly to the company's website by typing the address yourself, never by clicking the email link.

Frequently Asked Questions

Can I recover my email if I do not remember the password or the recovery phone number?

Yes. Contact your email provider's support team directly — Gmail, Outlook, and Yahoo all have phone support. You will need to answer security questions or provide other proof that you own the account, such as a credit card used to set it up or a phone number associated with the account at any point. This process can take several days.

What if I think my email was hacked but I am not sure?

Check your account activity log. In Gmail, scroll to the bottom of any inbox page and click "Details" next to "Last account activity." In Outlook, go to Security settings and look for "Recent activity." If you see logins from places you do not recognize or at times you were not using the account, your account has been compromised. Change your password when ready and follow the steps in the section above.

Is there any legal way to access someone else's email?

Law enforcement can obtain a warrant to access someone's email. Employers can access employee email accounts on company servers if they own the server and have a policy in place. Parents may have legal access to minor children's accounts in some states, but laws vary widely. In all other cases, accessing someone else's email is illegal. If you need access for a legal reason, consult a lawyer.

What should I do if someone is using my email to send spam or impersonate me?

Your account may not actually be hacked — someone may have spoofed your email address, which means they are sending mail that appears to come from you but is not coming from your actual account. Check your sent folder to confirm. If your sent folder is empty but people are receiving mail from your address, report it to your email provider and to the FBI's IC3. If your sent folder shows mail you did not send, your account is hacked and you should follow the recovery steps above.