Threats & attacks
Login Attempt Alerts: What to Do the Moment One Lands
Before a 'new login' or 'suspicious attempt' notification turns into a full takeover, there's a short window to verify it, lock things down, and shut out whoever's knocking. Here is the calm, owner-only checklist.
See the first four movesOfficial tools only
Every step uses Instagram, TikTok, X, or LinkedIn's own security settings.
No password, ever
We never ask for your password, PIN, or a login code — and never will.
Owner-only
Guidance for your own account, or a consenting family member's, with them present.
No tracking claims
We don't promise to identify whoever tried to log in.
Alert links are treated as possible phishing — always open the app yourself to verify.
The instant-response checklist, in order
Four moves for your own account — worked from the app itself, never from the alert.
1. Don't tap the alert's links
2. Confirm whether it was you
3. Change your password in-app
4. Revoke sessions, then re-check recovery
Which official route each method unlocks
| Provider | Alerts you to an unrecognized login | End all other sessions from settings | Hardware security key (FIDO) for 2FA | Official 'my account was hacked' recovery |
|---|---|---|---|---|
| Instagram — app & Help Center | Yes | Yes | Yes | Yes |
| TikTok — app & Safety Center | Yes | Yes | No | Via form |
| X (Twitter) — app & Help Center | Yes | Yes | Yes | Via form |
| LinkedIn — app & Help Center | Yes | Yes | No | Via form |
We do
- ✓ Verify a login alert inside the platform's own security settings
- ✓ Reset your own password and turn on 2FA everywhere
- ✓ Revoke active sessions and remove devices you don't recognize
- ✓ Confirm your recovery email and phone still belong to you
- ✓ Walk a family member through securing their own account, with them present
We never
- ✗ Ask for your password, PIN, or a login / 2FA code
- ✗ Log into, access, or monitor anyone else's account
- ✗ Click or 'confirm' through the links inside the alert itself
- ✗ Bypass two-factor, one-time codes, or any login screen
- ✗ Promise we can name the person behind the attempt
Everything here is for the account you own — or a consenting family member's own account, with them in control. We never handle credentials, and we never touch someone else's account.
The login-alert email itself
A genuine sender domain, a device and location that don't match you, and no demand to 'click here to confirm'.
Active sessions & devices
Any session with an unfamiliar device, browser, or city still signed in right now.
Recent login history
A successful or failed sign-in at a time or place you can't account for.
Recovery email & phone
Your own address and number, unchanged, with no pending change you didn't request.
Security-change notices
Emails about a password, email, or 2FA change you didn't make — the sign a near-miss became a hit.
Only check accounts and inboxes that are yours, or a family member's own account with them beside you. We never ask you to share the contents with us.
- A password change now ends the attempt before a second try succeeds.
- Revoking sessions kicks out anyone already halfway in.
- Recovery details are far harder to reclaim once an attacker changes them than to protect now.
There's no countdown here. A login alert usually means the attempt was blocked — you have time to work through this calmly, in order, on your own account.
FAQ
How do I know if a login attempt alert is genuine or a phishing scam?
Never judge it from the message itself; instead, open the app or website directly from a bookmark and check the login activity screen in its official security settings, because a real attempt will show up there while a fake alert exists only to make you click its link.
Should I click the link in the login alert to secure my account?
No — treat any link inside the alert as possible phishing and navigate to the platform yourself, since attackers often send fake 'suspicious login' notices to trick you into typing your password on a lookalike page.
The alert says the login was blocked, so do I still need to do anything?
Yes, a blocked attempt means someone already has your username and is trying passwords, so you should still change your password to a new unique one, turn on two-factor authentication, and confirm your recovery email and phone are unchanged.
What is the fastest way to lock out someone trying to get into my account?
Change your password from inside the app's official settings and then end all other active sessions, which signs out every device except the one you are using and forces anyone who was in to log in again.
Can HackSN tell me who is trying to log into my account?
No, we cannot identify the person behind a login attempt and we never promise to, because the honest and legal focus is securing your own account rather than tracing or accessing anyone else's.