Hey everyone, I'm dealing with a pretty serious issue here. My accounts are getting hacked left and right—I'm talking about Steam, Reddit, Instagram, and Twitter here. I never get any alerts about new device logins, except for one notification that my Instagram email got changed. Each of my accounts is secured with different emails and passwords, so I'm not reusing logins. I've set up two-factor authentication on most of these accounts already, and some had it before they got hacked, including Instagram and Steam. I even reformatted my PC, but the hacks just keep happening. I'm worried there might be malware or keyloggers on my devices. Should I completely wipe everything? I'd really appreciate any advice you can give me!
4 Answers
First things first—if you think there might be malware on your PC, consider reinstalling Windows from a USB stick. It’s a solid move to ensure a clean slate. After you’ve done that, change your passwords for all your accounts. Definitely enable two-factor authentication if you haven’t yet, and make sure to remove any unknown devices linked to your accounts. Lastly, don’t forget to use a password manager like Bitwarden to help create strong, unique passwords for each of your accounts!
Tried that yesterday when my Steam was compromised, and now my Twitter just got hacked after the Windows reinstall. Thanks for the suggestions though!
Since you're experiencing these hacks despite having 2FA, pay close attention to the device you're using for 2FA. If it's set up on your mobile and you're logged into services there, someone could easily take advantage of that. I suggest logging out of all sessions on every device, especially your phone, and just use your PC for now. Monitor if any hacks reoccur after a few days.
Reinstalling Windows is definitely critical here. But don't overlook securing your email since that could be the gateway for other hacks. Treat it like priority number one. Remove any old recovery options and reset everything to ensure it only connects to your phone. Also, activate 2FA on that account. When you start fresh with a password manager, pick solid unique passwords for each account, especially for financial ones. And always check to make sure no recovery info has been tampered with after getting hacked. You might also want to alert your bank about potential unauthorized access.
Someone else had a similar issue not too long ago. I suggest checking out that thread for more insights and advice.

And remember, when you change your passwords, make them complex! Weak passwords are often the reason for hacks.