How can I resecure my account if someone breaks into it?

If someone breaks into your account, the first thing you should do is change your password. Your new password should be at least 8 characters long, have a mixture of letters, numbers, and symbols, and not be based on any of your previous passwords or the same as the password you use anywhere else.

If the intruder has changed your password, you can reset it at the Lost Information page. If you only enter your username, the password reset link will be sent to the email address currently on file for your account. If the intruder has changed the email address on your account as well, enter both your username and the email address you previously confirmed on your account.

Once you have access to your account again, check to see if the intruder has added any email addresses you do not control to your account. To do this, visit the Email Management page. This shows all previous email address that have been confirmed for your account. You can use this page to delete any address that isn't yours by first changing your email address back to an email address that was confirmed on your account earlier than the email address you want to remove. Once you've re-confirmed the change, you will be able to select the unwanted email address and remove it.

For security reasons, you can't remove the first email address you confirmed on your account. If the intruder has added a new email address to your account, and you never confirmed your email address or you no longer have access to an email address that was confirmed earlier than the intruder confirmed the unwanted email address, your account will never again be fully secure, and you should create a new one.

If an intruder edits or deletes your entries, icons, or profile, they can't be recovered or restored. Our backups are taken at the database level, not at the individual account level, and it's not possible to restore only a single account from backup.