Your Password Got Stolen. Here’s Exactly What to Do Next

That sinking feeling when you can’t log into your email, your friends are getting strange messages from your account, or you notice activity you didn’t authorize. It’s one of the most stressful things that can happen in your digital life. But here’s the good news: if you act quickly and follow the right steps, you can take back control. On this episode of Tech Talk with Refresh Computers, David Levitt and Adam Littlefield break down exactly what to do when you’ve been hacked, plus they cover their Refresh Plus antivirus package, how to stream music for free (legally!), and a quick trick for identifying any song in seconds.

Listen to the Episode

Step One: Change Your Password Immediately

If you suspect that someone has gained access to one of your accounts, the single most important thing you can do is change your password as fast as possible. Speed genuinely matters here — the longer an attacker has access, the more damage they can do.

But there’s a catch: you need to do it from a device and network you trust. That means your own phone or computer, connected to your home Wi-Fi. Don’t run to the library or a coffee shop to try to fix this. Many services like Facebook, Google, and Microsoft track which devices and networks you normally use. If you try to recover your account from an unfamiliar device or network, you may trigger additional verification steps that slow you down — and time is something you don’t have a lot of in this situation.

There’s no harm in changing your password the moment you suspect something is wrong. The only thing you need to do is make a note of your new password so you don’t forget it.

Set Up Two-Factor Authentication (2FA)

Once you’ve changed your password, your next move should be enabling two-factor authentication on every account that offers it. Two-factor authentication (sometimes called 2FA or multi-factor authentication) adds a second layer of security. Even if someone steals your password, they still can’t get in without the code sent to your phone or email.

Here’s why it’s so effective: if someone with access to your account tries to change the phone number or email associated with it, the service will first send a verification code to the original phone number or email on file. That means the attacker gets blocked, and you get alerted that something fishy is happening.

A Word About SIM Swaps

There is one rare but serious exception to the safety of SMS-based two-factor authentication: SIM card theft, also known as a SIM swap. In this scenario, a criminal convinces your mobile carrier to transfer your phone number to a SIM card they control. Once they have your number, they can receive your two-factor codes. While this is uncommon, it does happen — and it’s one more reason to lock down your mobile carrier account with a strong, unique password and a PIN.

Your mobile carrier account deserves extra attention. Your phone number is often the master key for password resets across email, social media, and banking.

What If the Attacker Already Changed Your Password?

Sometimes you’re too late — the hacker has already changed your password and locked you out. Don’t panic. The major platforms have official account recovery processes designed for exactly this situation.

• Facebook: Go to facebook.com/hacked to begin the account recovery process.
• Google/Gmail: Visit Google’s Account Recovery page and follow the prompts. You may be asked about previous emails, security questions, or other verification details.
• Microsoft/Outlook: Microsoft has a similar recovery page where you can verify your identity through previously associated information.

These recovery processes do work, but they require patience. In many cases, a real human is reviewing your request and verifying that you are who you say you are. It may take some time, but staying calm and following the steps carefully will get you back into your account.

Patience beats panic. The account recovery process works — but rushing through it or skipping steps will only slow you down.

Don’t Reuse Passwords — Ever

One of the biggest reasons accounts get compromised in the first place is password reuse. If you use the same password for your email, your bank, and your social media, a single breach can give an attacker the keys to everything. Use a password manager to generate and store strong, unique passwords for every account. It takes the burden of remembering dozens of passwords off your shoulders and dramatically reduces your risk.

Refresh Plus: Antivirus, Monitoring, and Peace of Mind

October is Cybersecurity Awareness Month, and it’s the perfect time to think about how you’re protecting your devices. Refresh Computers offers a service called Refresh Plus — an antivirus and monitoring package that goes well beyond what a standard antivirus subscription provides.

For just $90 per year per device, Refresh Plus includes:

• Bitdefender antivirus protection — one of the best in the industry
• System health monitoring — Refresh technicians keep an eye on your computer for errors, blue screens, and other warning signs
• Automatic notifications — if something goes wrong, you’ll know about it
• Three free 30-minute remote support sessions per year — normally $50 each
• Priority service — if you need to bring your device in, Refresh Plus customers go to the front of the line

At $90 per year, this is less than half the cost of comparable services — and you get real human technicians you already know and trust watching over your system in the background.

How to Stream Music for Free (Legally!)

Remember the days of Napster and LimeWire, when downloading music felt like you were one click away from an FBI raid? Those days are long gone. Today, you can listen to nearly every song ever recorded — completely free and completely legal.

Here are some of the best options for free music streaming:

• Pandora — excellent free tier with personalized radio stations
• Spotify — free version lets you create playlists and discover new music (with ads and some shuffle limitations)
• Amazon Music — free ad-supported listening is included with Amazon Prime
• YouTube — a massive library of free music and music videos
• Radio station apps — apps like iHeartRadio and local station apps (like the WDBO app) let you stream live radio from anywhere in the world

If you decide to upgrade to a paid tier on services like Spotify or Amazon Music, you’ll typically get ad-free listening and offline playback — meaning you can download songs to your device and listen without an internet connection. That’s great for road trips, flights, or anywhere with spotty service.

If setting up a music streaming app feels overwhelming, the team at Refresh Computers is happy to help you get it configured on your phone, tablet, or computer.

Tech Tip of the Week: Identify Any Song in Seconds

Ever been in a store or restaurant and heard a song you loved but couldn’t name? Here’s how to figure it out instantly:

• iPhone users: Just say “Hey Siri, what song is this?” and hold your phone toward the music. You can also add a Shazam button to your Control Center for one-tap identification.
• Android users: Ask Google (or Gemini) “What song is this?” — it’s gotten remarkably good at identifying music. Google Pixel phones even have a feature that shows the name of nearby songs right on your lock screen.
• Shazam app: The original song-identification app is still available as a free download and works on both iPhone and Android.
• Hum it: Both Google and Siri can now identify songs just from you humming or singing the melody — no actual recording needed!

Need Help? Refresh Computers Has Your Back

Whether you’re recovering from a hacked account, looking for better antivirus protection, or just want someone to help you set up a music app on your phone, the team at Refresh Computers is here to help. You can call the free tech support hotline at 407-478-8200, visit the store at 820 E. State Road 434 in Longwood, FL (Monday–Saturday, 9 AM–7 PM), or head to refreshcomputers.net to explore past episodes, sign up for email notifications, and chat with their AI assistant. Don’t wait until it’s too late — take control of your digital security today!