Lock it down after recovery

Recovered accounts get hit again unless you close the gap.

1. Change password to a unique one.
2. Turn on two-factor with an authenticator app and save backup codes.
3. Log out all unknown sessions in Accounts Center.
4. Remove unknown emails, phones and connected apps.
5. Turn on login alerts.
6. Secure the linked email account with its own 2FA.
7. Review Page roles and ad account admins.
8. Check Saved login info and remove devices you don't use.

Run it once now and again a week later. Detail on the strongest step: two-factor setup. Keep a copy of your emergency kit.

UnbanPro walks every recovered client through this before closing the case. More on staying in good standing.

Signs the hacker left something behind

• An unknown email in Personal details
• An unknown account in Accounts Center
• New "Ad accounts" or Business Portfolios you didn't create
• Saved backup codes you didn't generate

Questions people ask