Help, I think I've been hacked

Sign up for the web.dev newsletter.

Thousands of websites are compromised by cybercriminals every day. These hacks often go unnoticed by visitors, but they can still cause real harm to anyone who loads the page, including the site owner. A hacker might, for instance, inject malicious code that records keystrokes on visitors' machines and steals credentials for online banking or financial services. Unsure whether your own site is affected? Start with the guide on how do I know if my site was hacked.

Different errors that might indicate a hacked site.
If you're a site owner and you see one of these, you might have been hacked.

Learn more about hacking

The following video explains:

  • How and why sites get hacked.
  • How to recover a site and clear user-facing warnings.
  • How long a fix typically takes.
  • Whether to handle it yourself or bring in a professional.