Skip to content
WeMakeWebWork

Urgent

My website has been hacked

Strange pages, spam links, redirects to other sites, or a red warning in the browser. Here is what to do first.

My website has been hacked

Photo: Packer1028, CC0, via Wikimedia Commons

Signs

  • A red "deceptive site" or "dangerous site" warning
  • Visitors are redirected to spam or scam sites
  • Pages or links you did not create, often in other languages
  • Your host has suspended the site or warned you
  • Google search results show spam titles for your site

Usual causes

  • Out-of-date plugins, themes or software
  • Weak or reused passwords
  • An old admin account nobody uses
  • Insecure hosting

What you can check yourself

  1. Take screenshots of what you see.
  2. Change your hosting, site admin and email passwords from a clean device.
  3. Check your site’s user list for accounts you do not recognize.
  4. Do not delete the site; it may be needed to find the cause.

When to get help

Get help straight away. Hacked sites can harm visitors, damage your search rankings and get your email blacklisted.

How we can help

Fixed quote · No obligation

Get help with this

Tell us what you are seeing. If it is urgent, say so and we will prioritise it.

Never send passwords through this form. If we need access, we will explain how to add us safely.

Questions from readers

Question about My website has been hacked? Ask here.

Ask a question

We can’t reply privately. Useful questions get answered here on the page.