Discord Recovery Guide

Discord Account Hacked? How to Recover It

Last updated: October 2026

Most Discord hacks don't involve your password at all. The attacker steals your session token — a behind-the-scenes key that logs them in as you — usually through malware or a phishing link. That changes the recovery playbook completely: changing your password without cleaning your device just hands the account right back to them. Here's how to do it properly, in the right order.

Step 1: Understand how the token theft probably happened

Most Discord account thefts follow one of two patterns:

• Malware: you downloaded something — a "mod," a cheat, a game file — that included a token grabber, silently stealing your Discord session token.
• Phishing: a link sent from a hacked friend's account (so it looked trustworthy) that took you to a fake Discord login page, or a QR-code scam that logged the attacker in through your phone.

This matters because of one fact: a password change is not enough if the theft was token or malware-based. If malware is still on your device, the attacker keeps getting fresh tokens no matter how many times you change the password.

This video walks through the immediate response — resetting, forcing logouts, scanning for the trojan, and securing your other accounts:

Watch on YouTube: Your Discord Got Hacked? Start Here

Step 2: If you can still log in, lock the attacker out

1. Run a full antivirus/malware scan first. Clean the device before you change anything.
2. Change your password: User Settings > My Account.
3. Enable two-factor authentication if it wasn't on.
4. Go to User Settings > Authorized Apps and revoke anything suspicious.
5. Go to Settings > Devices and use "Log out of all known devices." This kills the attacker's session.

Step 3: If you're locked out, try the password-reset email

From the Discord login page, request a password reset to your email. If the attacker hasn't changed the email on the account, this gets you back in — then do the lockdown above immediately.

Step 4: File the hacked-account support ticket

If the reset doesn't work, the official path is Discord's compromised-account ticket form at dis.gd/hackedaccount (this is Discord's own official shortcut to the Trust & Safety ticket form).

Two things people trip on here:

• You need a separate support account to file the ticket — you can't file it from your Discord login. Create one (a fresh email works) and plan for this instead of getting stuck at the login screen.
• Select the "Hacked account" category and include: your username/handle, the original email on the account, a clear description of what happened, and any supporting documentation — purchase receipts (Nitro, subscriptions, store purchases), screenshots, and anything else that ties you to the account.

Honest timelines

• Initial ticket responses typically arrive within 1 to 3 business days; complex cases take longer.
• Once a support agent responds, follow their steps exactly and promptly — back-and-forth stalls are the main reason cases drag.

After recovery: the sweep most people skip

1. Change the password on your linked email and on any account that shared the Discord password. Assume the attacker saw them.
2. Check Authorized Apps again — revoke anything you don't recognize.
3. Tell your friends to ignore messages "from you" sent while the account was compromised — and warn them not to click any links in those messages. This is how the token theft spreads: one hacked friend's account becomes the phishing lure for the next victim.