What to do if your Discord account gets hacked

How to recognize a hacked Discord account

Every online platform is somewhat vulnerable to hacking – Discord is no exception. However, Discord account theft became a particular problem after the introduction of Nitro, a paid subscription that provides Discord users with additional, enhanced platform features.

Some of the risks associated with Discord include unauthorized usage of debit and credit cards linked to a hacked account. For example, hackers can buy Discord Nitro for themselves using the "gift Nitro" feature. Additionally, a compromised Discord account can serve as a gateway to other services linked to it and then be used to distribute Discord scams.

Stay vigilant and find out what signs may indicate that your Discord account has been hacked:

• Unusual activity on your account. A typical sign of a hacked Discord is an unusual activity associated with the profile. For example, you may get notifications from random servers that you’ve never joined or receive emails about logging in from a new IP or trying to reset your password, even though you didn’t take any of these actions. If this happens – it’s best to assume that someone is trying to take over your account and start acting right away.
• Strange messages, friend requests, and settings. Suppose you see messages and invitations sent from your account that you know nothing about – someone besides you is undoubtedly using your Discord. The same applies to account setting changes you had nothing to do with.
• Unknown transactions. If you have a card connected to your account and you notice some unexplained transactions related to it, it’s a sign that another Discord user might have access to your profile.
• Unexplained one-time codes. If you have 2FA enabled (which we recommend), a thief who tries to log in to your account will need an additional one-time code to verify their identity. If you’re not trying to log in to Discord, and you’re getting such codes – someone else is trying to hack into your account. Most likely, they already know your password, so take action immediately.

What should you do if your Discord account is compromised?

If your Discord account has already been hacked – don’t panic. Here’s what you should do as soon as possible if someone else is using your account:

1. Contact your Discord friends

If your Discord account has been compromised, inform the people you have talked with on Discord. Warn them that they may receive strange messages from you. Tell them not to click on potentially malicious links sent on your behalf and not to download attachments. Otherwise, they could also fall victim to hackers.

2. Notify your bank

If you have a payment card connected to your Discord profile, contact your bank and inform it that your account has been compromised. Your bank may block future attempts to initiate Discord-related transactions.

3. Change your password

The first thing you should do to regain your account is to change the password.

• If you’re using a desktop client, open the Discord app, go to “Settings” (cogwheel icon), and select “User settings.”
• Under the “My account” tab, you’ll find the “Change password” option. Use it and follow the directions.

It works similarly in the mobile app. Go to “User settings,” then select “Account/My account” and “Change password.”

4. Log out of all devices

Go to “Settings” and click “Devices.” Here, you will find a list of all devices associated with your account. Below that, you’ll see the “Log out all known devices” button. Click it to log out of all devices, including those that hackers own.

5. Log out of all devices

Even if you have already recovered your account, you may find that hackers have managed to alter some settings – change your email address, associate other apps with your profile, or grant access to bots, for example. Go through your account settings and change any details that seem suspicious.

6. Change passwords for related services

If your Discord has been hacked, it’s a good idea to change the passwords to linked services – including email. Hackers can use your Discord credentials to get into other accounts, so change your passwords and log out of all devices where possible.

7. Scan your computer for malware

Think about how your account could have been hacked. Perhaps your device was infected with malicious code after you clicked a link or downloaded a file from an unknown source. You might have even clicked a link sent by a friend, not knowing that they were hacked before you. Hackers often spread Discord malware through phishing – impersonating others to gain the victim’s trust. Scan your drive with antivirus software, just in case.

8. Contact Discord support

This step should interest you mainly if you can no longer access your account because the hacker managed to log you out and change the password. In such a case, submit a ticket through the Discord support site. Staff can help you regain access to your account.

Even if you’ve managed to recover your account, opening a ticket and informing the Discord team of the situation won’t hurt. You should also do it if the hackers have damaged your account, for example, they wiped it, and you need to restore stolen data.

How to protect your account from future attacks

You don’t have to face the consequences of losing access to your Discord account. Learn our tips for securing your profile so that you have the maximum chance of avoiding getting hacked.

• Monitor your account. Regularly check what is happening on your Discord account. Also, pay attention to notification emails – they might let you know if someone tries to log into your account.
• Enable two-factor authentication. Enabling 2FA means you will have to enter your password and a one-time verification code to log in to your account. This will ensure that hackers won’t gain access to your profile too quickly – even if they somehow learn your password. You can enable 2FA in Discord account settings in the “My account” tab.
• Use strong and unique passwords and keep them updated. The Discord app won’t let you set a password shorter than eight characters, but remember that it should also contain special characters and upper- and lowercase letters. Also, always set up a unique password – don’t use the same one everywhere. If you have trouble remembering all your passwords, use a secure password manager.
• Be cautious about phishing. Phishing is a scam in which someone pretends to be someone else to trick you into revealing personal data or downloading malware. Phishing incidents are not uncommon, so always double-check the links you click on and the sites you visit. Don’t open links or attachments from suspicious sources.
• Keep your personal information private. Remember that if you use a public server – you can’t be sure who also uses it and reads your messages. Not everyone has good intentions, so don’t share confidential information with strangers.
• Consider installing a VPN. A VPN service can protect you from some cases of data theft through strong encryption, which is especially important if you connect to the internet via public, unsecured networks. NordVPN also comes with Threat Protection Pro, a unique feature that protects you from opening malicious links.