Short answer
Whether or not you can still sign in, start with LinkedIn’s “Report Unauthorized Account Access or Changes” form and include your profile URL: LinkedIn verifies the account is yours and then helps you regain access. If you can still get in, act straight away: change your password, turn on two-step verification, sign out of every session you don’t recognise under Sign in & security, and check that the email addresses and phone numbers on the account are yours. Secure the personal email linked to LinkedIn too. Once you are back in, review new connections, posts, likes and messages sent while the account was compromised, and delete anything you didn’t do.
Signs your LinkedIn was hacked
- You can’t sign in, or the email address or phone number on the account has changed.
- Connections tell you about messages, posts or invitations you didn’t send — often fake job offers or links.
- New connections, follows or likes you don’t recognise.
- Sessions on devices or in places you don’t know under “Where you’re signed in”.
- Two-step verification switched on or off without you.
If you can’t sign in
- Submit LinkedIn’s “Report Unauthorized Account Access or Changes” form, with your profile URL if you have it. LinkedIn checks that the account is yours, then helps you get it back.
- If the problem is two-step verification — you lost the phone or authenticator — sign in with your email or phone and password, then choose “verify your identity” on the two-step screen. LinkedIn asks for a photo of an official government-issued ID.
- Secure your email first if the hacker got in through it — otherwise they can reset LinkedIn again.
If you can still sign in
| Step | Where |
|---|---|
| Report the access | The “Report Unauthorized Account Access or Changes” form — LinkedIn asks for it even if you can still sign in |
| Change your password | Me → Settings & Privacy → Sign in & security → Change password; use a unique, strong one |
| Turn on two-step verification | Sign in & security → Two-factor authentication → Set up; an authenticator app or SMS |
| End unknown sessions | Sign in & security → Where you’re signed in; sign out of anything you don’t recognise |
| Check contact details | Sign in & security → Email addresses and Phone numbers; remove anything that isn’t yours |
An authenticator app is the stronger choice: it keeps working if your number is taken over in a SIM swap. More in setting up two-factor authentication.
Clean up after the hack
- Connections: review recent ones and remove people you don’t know or trust — attackers add contacts to spread scams.
- Posts and activity made while the account was compromised: delete what isn’t yours.
- Follows, likes and other actions: undo the ones you didn’t make.
- Messages: check sent messages, delete anything you didn’t write, and tell the recipients. Fake recruiter messages from hacked profiles are a common lure for job and task scams.
- Profile: check your name, headline, photo and contact info for changes.
When it’s a connection’s account
If a contact’s profile suddenly sends you odd links, job offers or requests for money, their account may have been taken over. LinkedIn suggests reporting it from their profile: More → Report or block → report the account → “This person is impersonating someone”. While LinkedIn investigates you can hide your contact information, block the member or remove the connection. If someone has built a fake profile with your name and photos instead, see reporting a fake LinkedIn profile; if LinkedIn has restricted your account, see LinkedIn account restricted.
Frequently asked questions
Can I recover my LinkedIn if the hacker changed my email and phone?
Yes. Submit LinkedIn’s “Report Unauthorized Account Access or Changes” form with your profile URL; LinkedIn verifies that the account is yours and helps you regain access.
I lost the phone I use for two-step verification. How do I get in?
Sign in with your email or phone and password, choose “verify your identity” on the two-step screen, and upload a photo of a government-issued ID.
Does signing out of other sessions remove the hacker?
It ends their sessions. Change your password and turn on two-step verification at the same time, so they can’t sign in again.
What should I check after getting my account back?
Recent connections, posts, likes, follows and messages sent while the account was compromised — and the email addresses and phone numbers on the account.
Sources: LinkedIn Help — report a compromised account, LinkedIn Help — turn two-step verification on and off, LinkedIn Help — see where you’re signed in, LinkedIn Help — no access to your two-step verification device