I my GitHub Account is Hacked

[alan7turning]

Select Topic Area

Question

GitHub Feature Area

Actions

Body

Someone Hacked my gmail I don't known exactly what happened. They enable 2FA in my GitHub and reset it's password I cannot login to my GitHub account I can send forget password request to my email but then It is asking for that 2FA which I don't have

Please Help
How can I contact GitHub

[haroonmaqbool]

Hey @alan7turning, sorry to hear that if you’ve lost access to your GitHub account due to 2FA being enabled without your control you’ll need to contact GitHub Support directly. Just go to https://support.github.com/request?tags=rr-account-access
Select Account and describe the issue including that your Gmail was compromised and 2FA was enabled without your authorization. Avoid trying multiple password resets since that can lock your account temporarily. GitHub’s Trust & Safety team will verify ownership through your recovery email and help restore access.

[haroonmaqbool]

That looks suspicious those emails weren’t sent by you, so your Gmail might be accessed through a third-party app. https://myaccount.google.com/security, remove any unknown devices and third-party app access, revoke all app passwords, then change your Gmail password and enable 2-Step Verification using your phone.

[alan7turning]

I remember I clicked on a site that asked for github 3rd party integration

[haroonmaqbool]

That explains it, the site you clicked on most likely had malicious 3rd-party integration permissions.

[alan7turning]

but does that gives him access to send mails from my gmail ?
Like he can use my email to reset password but sending mail is causing me stress

[haroonmaqbool]

Yes, if that site had permission to access your Gmail through OAuth it could send emails using your account without needing your password. But you can remove any app or service you don’t recognize. Once you revoke its access it immediately loses the ability to send emails or use your Gmail for anything. After that, just change your Gmail password and turn on 2-Step Verification.

[777mudit]

Hello, Somebody also hacked my account similar way like yours and I got this email recently "A personal access token (classic) "443209" with delete_repo, repo, user, and workflow scopes was recently added to your account". Idk how to regain the access of my Github.
Is there any way ?

[alan7turning]

I have written to GitHub but there is no response till now.

[ZohaiAli]

Hi @alan7turning 👋
Sorry to hear that — if your GitHub account was compromised and 2FA was enabled by someone else, the only safe and supported way to recover it is by contacting GitHub Support directly.

Go to 👉 https://support.github.com/contact/account-recovery

Then select “I lost access to my 2FA device” and follow the recovery steps.

Be sure to:

Use the same email address linked to your GitHub account.

Provide any verification details (previous recovery codes, SSH keys, or repo names) if asked.

GitHub Support will manually verify your ownership and help you regain access.

⚠️ Don’t share personal info or recovery links publicly here — only communicate through the official Support form.

Hope this helps you recover your account safely 🙏

[777mudit]

I tried but the person who hacked my account change the password and enables two factors authentication so if there are any other way to recover my account please let me know

…

On Sun, 12 Oct 2025, 10:50 am Harshit Joshi, ***@***.***> wrote: I have written to GitHub but there is no response till now. — Reply to this email directly, view it on GitHub <#176597 (reply in thread)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/BYUAM4AU23XNRV5IHFGPGXD3XHQKLAVCNFSM6AAAAACI5UQPISVHI2DSMVQWIX3LMV43URDJONRXK43TNFXW4Q3PNVWWK3TUHMYTINRVGY4TQNY> . You are receiving this because you commented.Message ID: ***@***.***>

[queenofcorgis]

Hi @alan7turning 👋

If you’ve lost access to your two-factor authentication (2FA) credentials, you can regain access to your account by using your recovery codes or another recovery option. Please visit GitHub’s Virtual Assistant to explore your available options.

If GitHub doesn’t support 2FA via text message in your country, you’ll need to set up authentication using a TOTP application. For more information on configuring 2FA with a TOTP app, here is the documentation.

I highly recommend you read through our GitHub 2FA Troubleshooting & Prevention Guide 🔐 if you have additional questions.

If you’re unable to resolve your issue with the resources above, please open a ticket in our Support Portal as no other Community Discussions team members will be able to assist with account-related questions. We appreciate your understanding!