If you believe your email account has been accessed without your permission, used to send spam, or shows other signs of compromise, please follow these steps carefully to secure your account.
Sign out of all active sessions on every device (laptops, phones, tablets).
Whenever possible, use a different, trusted device to perform the recovery steps.
Do not continue using the compromised device until it has been thoroughly checked for malware or viruses.
If you haven’t already, immediately change your password to a strong and unique one:
At least 12 characters long.
Includes upper and lowercase letters, numbers, and symbols.
Avoid passwords you’ve used before or use on other websites.
If you cannot log in, use the “Forgot your password?” option on the login pages for Everymail Webmail or Everymail My Account to recover access.
If available, activate MFA to add an extra layer of security.
Use an authenticator app (such as Sophos Authenticator) rather than SMS when possible.
Once you’ve regained access, carefully review your account settings:
Verify your recovery email address and phone number.
Check for mail forwarding rules — attackers often set up hidden rules to forward emails elsewhere.
Review the Sent and Trash folders for suspicious messages.
Look through security alerts or recent sign-in activity and remove any unfamiliar devices.
Run a full antivirus and malware scan on every device that accessed your account.
Remove any detected malicious software before signing in again.
If problems persist:
Reinstall your operating system (laptop/PC).
Perform a hard reset on mobile devices (phones, tablets).
Inform your contacts that your account was compromised, especially if spam or phishing emails were sent from it.
Advise them not to click any links or open attachments from suspicious messages.
If Everymail or Open-Xchange has not yet been informed about the incident, please report it to abuse@everymail.com.
Watch for unexpected password reset emails or unfamiliar activity.
Regularly review your account’s security settings.
Consider using a password manager to generate and store strong, unique passwords for all accounts.
If you used the same password elsewhere, change it immediately — attackers often reuse stolen credentials.
Check if your email or passwords have appeared in known data breaches at haveibeenpwned.com.
Reinstall your system (laptop/PC).
Perform a hard reset on mobile devices.
Then repeat all steps above to ensure full security.
Reason for this is, that hidden malware might be still on your system and sending out your personal info/ login info to the hacker.