Finding out that your password has been stolen can be scary — but quick action can save your accounts. First, immediately change your password everywhere it’s used. Never reuse the old one.
Next, enable two-factor authentication and check your account recovery options. Remove old devices or sessions from your account settings.
If you think your email was compromised, contact your provider’s security team. Finally, run a malware scan to ensure no keyloggers or credential stealers are on your computer.