Unauthorised access to my private account

• 

  po0ja · Member · Oct 8, 2025 at 11:11 am

  • Copy link
  • Add topic to favorites

  Hi there!

  I have a private blog on WordPress that I started more than ten years ago and I’ve granted access only to another friend. I’ve stopped checking the blog for a very long time, but I noticed that I received an email for a password reset on my registered email address, which I did not send. Today when I login to check my account, I see a notification for someone who accessed my account via an email link; the notification is marked ‘over a month old’ and I received no email at that time. Nor did I send an email link to anyone. How would someone go about getting an email link if it wasn’t sent by me?

  I’ve reset my password and turned on two step verification. Is there anything else I can do?

  Thanks very much, in advance!

• 

  raphaelwebdeve · Member · Oct 8, 2025 at 1:23 pm

  • Copy link

  Here’s a concise reply that solves the issue and also positions you as someone they can hire or message for further help with WordPress security:

  Hi @po0ja,

  You did the right thing by resetting your password and enabling two-step verification, those are the key steps to secure your account

  For maximum protection:

  • Check your security settings for unknown logins or connected apps.
  • Change your email password.
  • Make sure only trusted users have access.

  If you need expert help auditing your WordPress security, setting up advanced protections, or recovering from hacks, just message me. I specialize in WordPress site security and would be happy to help you secure your account and keep your site safe