What to do if your account is compromised
Suspect unauthorized access to your Everabyte account? Change your password, review sessions and devices, check shared links and contact security.
If you notice signs of unauthorized access — a sign-in you do not recognize, a device you did not connect, activity you did not perform — act quickly. This article lists the steps to take, in order.
In short
Change your password immediately, review your active sessions and connected devices and sign out anything you do not recognize, review your shared links, then contact the security team at [email protected].
1. Change your password immediately
Your password protects access to your account. If you suspect it is compromised, change it right away. Choose a strong, unique password that you do not use anywhere else.
2. Review sessions and connected devices
Session and device management is part of your account security. Review your active sessions and connected devices, and sign out any device you do not recognize. This helps cut off access someone may still have to your account.
3. Review your shared links
Check the files and folders you have shared. If a link should no longer be accessible, review your sharing settings and remove the access you no longer intend to grant. A compromised account can be used to reach shared content.
4. Contact the security team
Report what you observed to [email protected], with as much detail as you can: when you noticed the signs, what looked abnormal and which devices were involved. If your question is not security-specific, use [email protected] instead.
Why content protection holds
Access to services and decryption of content are separate by design. Session tokens are used for access control, not as decryption material. Even so, a compromised account is serious: act quickly, and never assume an attacker will stop at what they can technically reach.
Important — Never share your password or your encryption key with anyone, including support.
Common issues
How do I recognize a compromised account?
Typical signs include sessions or devices you do not recognize, and activity in your account that you did not perform.
What if I lost access because someone changed my password?
If you cannot sign in, see I cannot sign in, then contact [email protected].
What if I think my encryption key was exposed?
Your key protects file content; your password protects account access. If you believe your key was exposed, contact [email protected] before taking further action.
Where do I report a security issue?
Write to [email protected] with as much detail as possible: what you observed, when, and which devices were involved.
Was this article helpful?
Thanks for your feedback.
Still need help?
Can't find what you're looking for? Our support team can help.