If you received a notice from Reddit about needing to reset your password, see this article.
If you believe your account has been compromised, contact the admins here and select “Account Hacked” as the type of issue. Make sure you include the username of the affected account and tell us why you’re concerned.
Signs that something might be wrong:
-
You received email notification that the password and/or email address on your account changed but you didn’t request changes
-
You notice authorized apps on your profile that you don’t recognize
-
You notice unusual IP history on your account activity page
-
You see votes, posts, or comments that you don’t remember making, or private messages that you don’t remember sending
How did my account get compromised?
The most common reason is flawed password security, such as:
-
Simple passwords, like “12345” or “hunter2”
-
Reusing the same username and password across multiple sites
-
Logging in from an unsecured WiFi network
-
Forgetting to log out from a public computer
-
Sharing accounts with other people
-
Authorizing shady apps to use your Reddit account
How can I keep my account secure?
-
Use a strong, unique password
-
Adding two-factor authentication
-
Use a password manager
-
Keep a current, verified email address attached to your account so you can receive security notices and use the password reset system
-
Don’t share accounts
-
Don’t leave your account logged in or let the browser save your password on shared devices - you can use the account activity page to log out of all active sessions