Recover a Hacked Twitch Account
Someone changed the email and password on your Twitch account, and you are locked out.
Is this your situation?
You cannot log in to your Twitch account and the email no longer looks right to you. You want your channel back without losing more control than you already have.
Do this first
You want to recover the account, not start over somewhere else. If you cannot find or access your account and believe it was inappropriately accessed, try requesting a password reset first. If you cannot access your account after requesting a password reset, contact Twitch by opening a support ticket.
Which situation is yours?
- You can still log in but notice unfamiliar changes.
- You cannot log in and the email was changed.
- No password reset email arrives.
- You lost access to the phone or authenticator used for 2FA.
- You see unrecognized purchases on the account.
- You still have no control after trying the steps.
- You have unauthorized payments charged to you.
How Twitch handles this
- Changes to account settings or profile the user did not make are a sign of inappropriate account access.
- Receiving notifications for creators the user didn't follow is a sign of inappropriate account access.
- Whispers or chat messages the user didn't send is a sign of inappropriate account access.
- If no password reset email is received, the email on the account may have changed.
- Users who still do not have control of their account, or have unauthorized payments, after completing the recovery steps can open a ticket with Twitch.
Which recovery path is yours?
- Can you still log in to the account? Change the password as soon as possible, since this is recommended if you believe your account has been inappropriately accessed.
- Was your password reset email never received? The email on the account may have changed, which is why the reset email is not arriving.
- Did you lose access to your phone or authenticator? If you no longer have access to your old phone number, contact Authy to change the phone number associated with your Authy account.
- Did the recovery steps fail to restore control, or are there unauthorized payments? Open a ticket with Twitch, since this is the path for users who still do not have control or have unauthorized payments after completing the recovery steps.
What not to do
- Filing a new ticket for every update Reply to the confirmation email instead of creating a new ticket.Why it happens: Users think a new ticket gets faster attention when adding information.
- Expecting 2FA emotes to persist after disabling 2FA Disabling Two-Factor Authentication removes access to the exclusive emotes until it is re-enabled.Why it happens: Users disable 2FA during recovery without realizing the emotes depend on it staying enabled.
- Assuming Authy only applies to Authy app users The Authy Phone Change Form process applies to all 2FA users, not just users of the Authy app.Why it happens: Users without the Authy app assume the form does not apply to them and skip it.
What to have ready
- Your current username Confirm the username needed to file a support ticket for account recovery.
- Any remaining email or phone access Check whether you can still log in or receive a reset email or SMS.
- Saved backup codes Check if you saved backup codes during 2FA setup.
- Unexpected 2FA login requests 2FA login requests when you haven't logged in recently, despite already having 2FA enabled, likely mean your password has been inappropriately accessed.
- Payout method, if monetized Monetized Creators should check that their payout method is still set to their own information.
- Browser extensions on devices you used Review installed browser extensions for ones you do not recognize.
Stop this happening again
Setting up Two-Factor Authentication is highly recommended to provide an additional layer of security for a compromised account. You still have access to your account now, so set up backup recovery methods before that changes.
Quick reference
| Situation | Action |
|---|---|
| Can still log in | Change the password as soon as possible. |
| No reset email arrives | The email on the account may have changed. |
| Lost phone or authenticator | If no longer accessible, contact Authy to change the phone number on your Authy account. |
| Unrecognized purchases | Delete currently saved payment methods. |
| Still no control after steps | Open a ticket with Twitch. |
| Unauthorized payments | Contact Twitch via the provided link. |
| Unexpected 2FA requests | Change the password while leaving 2FA enabled. |
| Third-party app access | Disconnect apps under Other Connections in Connections Settings. |
Keeping track of who has access
Situations like this are preventable when access and recovery details are kept in one clear place instead of scattered across memory and inboxes. Delvia is built to be that structure for the people who manage access to a channel. Knowing who holds what, and how to recover it, keeps a hacked account from becoming a lost one.
Was this helpful?