Discord Account Hacked? Secure It, Remove Authorized Apps and Spot Scams

If your account is sending messages you didn’t write, or you see logins and apps you don’t recognize, act quickly. Discord says to reset your password, make sure multi-factor authentication is on, and remove any Authorized Apps you don’t recognize. Discord also warns that under its Terms of Service you’re responsible for your account’s security, and it may be unable to help recover an account that wasn’t secured.

Quick answer

Change your password now (User Settings > My Account > Change Password), turn on MFA, then go to User Settings > Authorized Apps and Deauthorize anything you don’t recognize. On Windows, run a Windows Defender scan. Can’t log in at all? Try Forgot your password? on the login page. Unexpected charges? Contact Discord billing rather than filing a chargeback, which Discord says can get your account suspended.

Does this match what you see?

  • Your account sent links or messages you didn’t send.
  • Your password or email was changed.
  • You clicked a “free Nitro” or game link and then things went wrong.
  • You see charges for Nitro or other purchases you didn’t make.

Computer (browser)iPhone & iPadAndroid

Based on Discord Support’s account security page and its password and multi-factor authentication pages, read on November 7, 2026.

Why this happens: the possible causes

How accounts usually get taken, per Discord.

  • A malicious link or fileCheck this first

    Discord says these often pose as games or free Nitro and are designed to steal login details.

  • Social engineeringCheck this first

    Discord warns of people manipulating you into sharing login or personal information, including fake Discord employees.

  • A reused or weak passwordPossible

    Discord recommends a strong, unique password and MFA.

Try these 60-second checks first

  • Don’t click any more links from the person or account that messaged you.
  • Use a device you trust for the steps below.

How to fix it, step by step

Work through these in order. They start with the quickest, safest checks and only move to steps that sign you out or remove data later.

Fix 1: Change your password and turn on MFA

Read first: can remove data5 minComputer (browser)iPhone & iPadAndroid

Discord’s first steps if you suspect your account is compromised.

iPhone & iPad

  1. Tap your avatar (bottom right) > cogwheel (top right) > Account > Password.
  2. Enter your current and new password, then tap Change Password.
  3. Turn on multi-factor authentication and save your backup codes.

Android

  1. Tap your avatar (bottom right) > cogwheel (top right) > Account > Password.
  2. Enter your current and new password, then tap Change Password.
  3. Turn on multi-factor authentication and save your backup codes.

Computer (browser)

  1. Click the cogwheel next to your username to open User Settings.
  2. Under My Account, select Change Password and set a new, unique password.
  3. Turn on multi-factor authentication and save your backup codes. See setting up 2FA.

Did it work? Your password is changed and MFA is on.

Fix 2: Remove Authorized Apps you don’t recognize

Safe & reversible3 minComputer (browser)iPhone & iPadAndroid

Discord says to review and remove unwanted Authorized Apps.

iPhone & iPad

  1. Tap your avatar > cogwheel > Authorized Apps.
  2. Tap the x on any app you don’t recognize.

Android

  1. Tap your avatar > cogwheel > Authorized Apps.
  2. Tap the x on any app you don’t recognize.

Computer (browser)

  1. Open User Settings (cogwheel, bottom left) > Authorized Apps.
  2. Press Deauthorize next to any app you don’t want.

Did it work? Only apps you use and trust are left.

Fix 3: Scan your computer for malware

Safe & reversible15 minComputer (browser)

Discord suggests a Windows Defender scan on Windows to check for viruses.

Computer (browser)

  1. On Windows, open Windows Security and run a Windows Defender scan.
  2. Remove anything it finds, then change your Discord password again from a clean device.

Our note: if you downloaded and ran a file someone sent you, assume your other accounts may be affected too, and change those passwords.

Did it work? The scan finds nothing.

Locked out of your account

Try Forgot your password? on the login page with your account email. If 2FA is stopping you, use a backup code: see can’t log in to Discord. If that fails, contact Discord Support. Discord says it may be unable to help recover an account that wasn’t secured.

Charges you didn’t make

  • Discord says to submit a request to its team saying there were unauthorized transactions, and to request a refund from the billing team at dis.gd/billing.
  • Avoid a chargeback first: Discord warns that a chargeback or refund request filed with your bank for Discord transactions may suspend your account pending investigation. See chargeback suspensions.

Someone changed your account email

Discord says that after an email change is confirmed, it sends a notification to the original email address with a Start Account Recovery button, valid for 48 hours. Don’t share that link. Account Recovery lets you:

  • Change the email back to your original address.
  • Log the account out of all devices, and set a new password.
  • Remove every phone number and multi-factor authentication method on the account, including yours, so add yours back afterwards.
  • Invalidate recovery links for any later email changes.

Select Start revert process and follow the steps. Discord says it fails if the link is over 48 hours old, an earlier recovery link was already used, your original email is now on another Discord account, or the new password is too short (under 8 characters; some regions have extra rules). Missed the 48 hours? Contact Discord Support.

Report the scam

Report scam messages with Report Message (right-click, or press and hold), and block the sender. See report or block someone on Discord for every option and what happens next.

How to know it worked

  • You control your account, MFA is on, and only trusted apps remain.

Still not working? Your next steps

  1. Account disabled after the hack? See Discord account disabled.

Official help routes

SocialAppFix can’t see or change your account. For account decisions, recovery and appeals, only the platform’s own tools can help. These links go to the official sites.

Frequently asked questions

Someone changed my Discord email. Can I get it back?

Discord sends a Start Account Recovery link to your original email, valid for 48 hours. It lets you revert the email and log out all devices; it also removes all phone numbers and MFA on the account, so add yours back afterwards.

What do I do if my Discord account was hacked?

Discord says reset your password, make sure MFA is on, deauthorize Authorized Apps you don’t recognize, and on Windows run a Windows Defender scan.

Will Discord recover my hacked account?

Discord says you’re responsible for your account’s security, and it may be unable to help recover an account that wasn’t secured. Contact Support if you’re locked out.

Is “free Nitro” on Discord a scam?

Discord warns that links offering free Nitro or games are often designed to steal login details.

Should I do a chargeback for charges I didn’t make?

Discord says to contact its billing team first. A chargeback with your bank may suspend your account pending investigation.

Sources and how we checked this guide

We base steps on the platforms’ own help pages and the phone makers’ official guides. Menu names change often and can differ by device, app version and region. Where a platform page could not be independently read, we link it so you can check the current wording yourself.

  1. Undoing an email address change (external site, opens in a new tab)Discord Support · checked 7 November 2026
  2. Account security and compromised accounts (external site, opens in a new tab)Discord Support · checked 7 November 2026
  3. Changing or resetting your password (external site, opens in a new tab)Discord Support · checked 7 November 2026
  4. Setting up Multi-Factor Authentication (external site, opens in a new tab)Discord Support · checked 7 November 2026

Last reviewed 7 November 2026 by the SocialAppFix editorial team against the sources above. Next scheduled review: 7 May 2027. Editor: Michael Michael. How we write and review guides.

What changed
  • 7 November 2026: Added undoing an email change within 48 hours; reporting moved to its own guide.
  • 7 November 2026: First published.

SocialAppFix is an independent guide and is not affiliated with or endorsed by Discord. We never ask for passwords, login codes or payment to fix an account.