# I think someone else is using my account

Someone may have your password or access to your Drime account? Follow these steps in order to lock them out, check what changed and protect your account.

Updated: 2026-10-22  
Source: https://drime.cloud/support/security-and-privacy/account-hacked

If you received a sign-in alert you do not recognise, see files you did not touch, or think your password has leaked, act right away. Follow these steps in order: the first ones lock the other person out.

## 1. Change your password

Go to **Settings** \> **Security**, then **Update password**. Choose a password you have never used elsewhere.

Changing your password signs you out of every other session, so the other person loses access. See [Change your password](https://drime.cloud/support/account-and-settings/change-your-password).

If you can no longer sign in, go straight to the last section, If you cannot sign in anymore.

## 2. Sign out the browsers you don't recognise

In **Settings** \> **Security**, **Web browsers** lists every browser signed in to your account, with its last activity, IP address and location. Click **Logout other sessions** to sign them all out except yours.

![The Web browsers and Devices & apps sections of the Security settings](https://drime.cloud/media/01M5A9WF08J239F7VXN8G43AKX/7ca7da2a2312-web-settings-security-sessions.png)

See [See and sign out your sessions and devices](https://drime.cloud/support/account-and-settings/sessions-and-devices).

## 3. Disconnect unknown devices, apps and tokens

- In **Settings** \> **Security**, under **Devices & apps**, click **Disconnect** next to anything you don't recognise: a Drime app, the browser extension or a third-party app.
- In **Settings** \> **Developers**, check **API access tokens** and revoke any token you did not create. See [Create an API token](https://drime.cloud/support/integrations-and-api/api-tokens).

## 4. Check your email address

In **Settings** \> **Account**, check that **Email address** is still yours. If it was changed, change it back: see [Change your email address](https://drime.cloud/support/account-and-settings/change-your-email). If you cannot, contact support (step 7).

## 5. Turn on two-factor authentication

With two-factor authentication, a password alone is no longer enough to sign in. Turn it on in **Settings** \> **Security**, and save your recovery codes. See [Turn on two-factor authentication](https://drime.cloud/support/security-and-privacy/two-factor-authentication).

A passkey is another way to sign in without typing your password: see [Sign in with a passkey](https://drime.cloud/support/security-and-privacy/passkeys).

## 6. Check your files

- Deleted files stay in the **Trash** for 30 days: restore them from there within that time. See [Restore deleted files from the Trash](https://drime.cloud/support/drive/restore-deleted-files).
- A file that was changed can go back to an earlier version: see [Restore a previous version of a file](https://drime.cloud/support/drive/restore-a-previous-version).
- Check your share links and the people you share with: see [Change or remove access and stop sharing](https://drime.cloud/support/sharing-and-collaboration/manage-access-and-stop-sharing).

## 7. Tell Drime support

Open the help menu, then **Contact support**. Choose **Account and login**, describe what happened and when, then click **Send request**. See [Contact Drime support](https://drime.cloud/support/getting-started/contact-drime-support).

## If you cannot sign in anymore

- You still receive email at your address: on the sign-in page, click **Forgot password?** to set a new password.
- You lost your two-factor codes, or your email address was changed: see [I can't access my email or my account anymore](https://drime.cloud/support/account-and-settings/recover-your-account), then contact support.

## If it doesn't work

| What you see | What to do |
| --- | --- |
| **The provided password does not match your current password.** | Type your current password again. If you no longer know it, sign out and use **Forgot password?** on the sign-in page. |
| **This password is too easy to guess. Make it longer, or mix in words that have nothing to do with each other.** | Choose a longer password, made of several unrelated words. |
| You no longer receive Drime emails | Your email address may have been changed. See [I can't access my email or my account anymore](https://drime.cloud/support/account-and-settings/recover-your-account), then contact support. |

## Next steps

- [I got a new sign-in alert](https://drime.cloud/support/security-and-privacy/suspicious-sign-in)
- [See and sign out your sessions and devices](https://drime.cloud/support/account-and-settings/sessions-and-devices)
- [Turn on two-factor authentication](https://drime.cloud/support/security-and-privacy/two-factor-authentication)