What to do if you shared your password
A shared password can unlock more than one account if it was reused. Change it everywhere it was used.
Quick answer
A shared password can unlock more than one account if it was reused. Change it everywhere it was used.
- Change that password now from a trusted device
- Change it anywhere else you reused it
- Turn on two-factor authentication
- Log out of all sessions
Do this now
Contact any financial provider whose login was exposed.
Understanding what happened
Sharing your password - whether you typed it into a fake login page or told someone over the phone or chat - means another person may now be able to sign in as you. The risk is highest for the account whose password you shared, but it spreads further if you reuse that password (or a close variant) anywhere else.
Attackers move fast once they have a working password. They may change your recovery email and phone, turn off alerts, read your messages, and use the account to reach your contacts or reset other services linked to it. If the account is your email, treat it as the most urgent, because email is the master key that can reset almost everything else.
The good news is that a password on its own is often not enough if you act quickly and you have a second factor. Changing the password, signing out other sessions, and turning on app-based two-step verification usually shuts the door - and the steps below walk you through doing that in the right order.
First 5 minutes
- Change that password now from a trusted device
- Change it anywhere else you reused it
- Turn on two-factor authentication
- Log out of all sessions
First 24 hours
- Review recent account activity
- Set unique passwords using a password manager
- Watch for phishing follow-ups
- Report if money or sensitive data was exposed
What not to do
- Do not pay anyone who promises to recover your money for an upfront fee
- Do not act on follow-up messages claiming to be the fraud team
- Do not delete evidence before saving it
Evidence to save
- Screenshots of the message and sender details
- Phone numbers, usernames, links, and account or wallet addresses
- Transaction references, receipts, and amounts
How to report
Report through official channels for your area.
Find official reporting links for your country in the reporting directory.
- Do not use phone numbers or links from the suspicious message - look up the official ones yourself.
- Report quickly if money was sent or ID documents were shared; speed improves your options.
- Keep your evidence - see how to save scam evidence.
Beware of recovery scams: no legitimate service guarantees getting your money back for an upfront fee.
This is general safety information, not legal, financial, or cybersecurity incident-response advice.
Frequently asked questions
How quickly should I act?
As soon as possible. Fast action - especially contacting your bank - gives the best chance of limiting harm or stopping a payment.
Will I get my money back?
Sometimes, if you act quickly, but there is no guarantee. Be very cautious of anyone who promises guaranteed recovery for an upfront fee - that is a recovery scam.