What to do if your account password has been stolen

If you tried to sign in to your account and received a notification that your password has been stolen, we recommend that you change the password immediately. To do it, follow these steps:

  1. On the page with the notification, enter your email address and request to send a link with instructions for changing password.
  2. Follow the link from the email and set a new password.

    We strongly recommend that you do not use the same password for multiple services. By cracking the password for one of them, an attacker can gain access to several accounts for different services at once. For secure storage of passwords, we recommend that you use Kaspersky Password Manager, which allows you to generate complex and unique passwords for each account.

  3. If two-step verification for additional account protection is enabled, you will also need to enter a unique security code one more time from the SMS message or from the authenticator app.

    If two-step verification is not enabled, we recommend that you enable it as soon as possible. This will increase the security of your data and protect your account even if an attacker has access to your email. With the enabled two-step verification, to sign in to your Kaspersky Account, an attacker will also need access to your mobile phone or a device with an authentication app installed. Ensure protection of your mobile phone and devices with an authenticator app installed, so in the future you do not have to worry about your password being stolen.

  4. If the steps above did not help and you cannot restore access to your account, then contact Customer Service.

If you received an email with instructions for changing your password that you did not request, you need to change your password as soon as possible. It means that your password has been stolen and someone else gained access to your account.

Kaspersky Account takes care of the security of your account and does not share your data with third parties. We do not keep your password, only the value of the cryptographic hash function of the password is saved. We make the decision that your password has been stolen based on data from open sources about hacking of other services. For security reasons, we block access to such accounts until the owner verifies their identity and creates a new strong and unique password.

Page top