What to do if your LinkedIn account is hacked

Submit LinkedIn's Report Unauthorized Account Access or Changes form as soon as possible and include your profile URL if you have it. LinkedIn checks that the account is yours, then helps you get back in.

• Our advice: only use LinkedIn's own help pages, and never pay or share sign-in codes with anyone who offers to recover the account for you.
• LinkedIn lists the usual ways in: signing in on a shared device without signing out, an old email or phone number that's been recycled, and a password reused on another site.

Source: LinkedIn Help: Report a compromised account, checked 15 October 2026

Submit the same form, then straight away:

1. Change your password to one you don't use anywhere else.
2. Turn on two-factor authentication.
3. Review your active sessions in Settings and sign out of any you don't recognise, or all of them.
4. Under Sign in & security, check your email addresses and phone numbers are current.
5. Reset the passwords of the email accounts linked to LinkedIn if they may be affected.

Source: LinkedIn Help: Report a compromised account, checked 15 October 2026

On desktop:

1. Click the Me icon and select Settings & Privacy.
2. Click Sign in & security, then Two-factor authentication.
3. Click Turn on, then Set up.
4. Choose Authenticator App or Phone Number (SMS) and click Continue.
5. For an app, choose Other, name the account LinkedIn, enter the secret key and then the 6-digit code. For SMS, enter the 6-digit code LinkedIn texts you and click Verify.

• In the app: tap your profile picture, Settings & Privacy, Sign in & security, Two-factor authentication, then the toggle.
• If you're signed in on a phone with notifications on, LinkedIn may send a sign-in prompt instead of a code.
• Campaign Manager, Recruiter and Sales Navigator users must keep it switched on.

Source: LinkedIn Help: Turn two-factor authentication on and off, checked 15 October 2026

LinkedIn's clean-up list:

1. Review recent connections and remove anyone you don't know.
2. Review posts and activity from the time the account was compromised.
3. Check recent likes, follows and other actions.
4. Check your messages and delete anything you didn't send.

• If a connection's account looks hacked, open their profile, click More, then Report or block, choose to report the account, select This person is impersonating someone and submit.

Source: LinkedIn Help: Report a compromised account, checked 15 October 2026

A Page is only as safe as its admins' accounts. LinkedIn recommends:

• Every admin turns on two-factor authentication.
• Review admin access regularly and give people the narrowest role they need, such as Analyst.
• Add your own email domains in Jobs settings. Without one, any member can post a job for your Page.
• Restrict, report or mark as spam unwanted messages, or turn off Page messaging in inbox settings.
• Report fake or duplicate Pages, and request verification if your Page is eligible.

Sources: LinkedIn Help: Ways to protect your LinkedIn Page, checked 15 October 2026; LinkedIn Help: LinkedIn Page admin roles, checked 15 October 2026

LinkedIn gives two routes:

• The identity check is run by Persona. LinkedIn doesn't say how long it takes.

Source: LinkedIn Help: No access to mobile device for two-factor authentication, checked 15 October 2026

Zolyp, which publishes this guide, is our own product, so weigh this section with that in mind. During clean-up, look for posts you didn't write. With Zolyp, every post waits for your approval before it publishes, so you know what's scheduled to go out. LinkedIn is one of the 9 platforms it publishes to (Instagram, Facebook, LinkedIn, Google Business, X, TikTok, YouTube, Pinterest, and Threads), and you approve the week before anything goes live. Plans that create the posts start at $29 a month, with a 3-day free trial.