You can also just enter your Yahoo email address here if you’re unsure of which information Yahoo has.

Phone number — Open your phone’s Messages app, open the text from Yahoo, and review the 8-character code in the message. Email address — Open your recovery email address inbox, open the Recover access to your Yahoo account email from Yahoo, and review the 8-character code in the middle of the email. If you entered your Yahoo email address, enter the missing numbers or letters from the recovery option listed, then follow one of the above substeps depending on whether you have a phone number or an email address on file.

Phone number — Open your phone’s Messages app, open the text from Yahoo, and review the 8-character code in the message. Email address — Open your recovery email address inbox, open the Recover access to your Yahoo account email from Yahoo, and review the 8-character code in the middle of the email. If you entered your Yahoo email address, enter the missing numbers or letters from the recovery option listed, then follow one of the above substeps depending on whether you have a phone number or an email address on file.

Phone number — Open your phone’s Messages app, open the text from Yahoo, and review the 8-character code in the message. Email address — Open your recovery email address inbox, open the Recover access to your Yahoo account email from Yahoo, and review the 8-character code in the middle of the email. If you entered your Yahoo email address, enter the missing numbers or letters from the recovery option listed, then follow one of the above substeps depending on whether you have a phone number or an email address on file.

Yahoo will automatically capitalize any letters.

Click Create a new password on the “Success” page. Enter a password into both text fields on the “Set a new password” page. Click Continue Click Looks good, then click I’ll secure my account later.

If you’re already logged into Yahoo on mobile and the account hack hasn’t yet signed you out, skip ahead to securing your account.

If prompted to select an existing account, tap the account, then enter the password (or, on some iPhones, Touch ID) if prompted. If this logs you into your account, skip ahead to securing your account.

You can also just enter your Yahoo email address here if you’re unsure of which information Yahoo has.

Phone number — Open your phone’s Messages app, open the text from Yahoo, and review the 8-character code in the message. Email address — Open your recovery email address inbox, open the Recover access to your Yahoo account email from Yahoo, and review the 8-character code in the middle of the email. If you entered your Yahoo email address, enter the missing numbers or letters from the recovery option listed, then follow one of the above substeps depending on whether you have a phone number or an email address on file.

Phone number — Open your phone’s Messages app, open the text from Yahoo, and review the 8-character code in the message. Email address — Open your recovery email address inbox, open the Recover access to your Yahoo account email from Yahoo, and review the 8-character code in the middle of the email. If you entered your Yahoo email address, enter the missing numbers or letters from the recovery option listed, then follow one of the above substeps depending on whether you have a phone number or an email address on file.

Phone number — Open your phone’s Messages app, open the text from Yahoo, and review the 8-character code in the message. Email address — Open your recovery email address inbox, open the Recover access to your Yahoo account email from Yahoo, and review the 8-character code in the middle of the email. If you entered your Yahoo email address, enter the missing numbers or letters from the recovery option listed, then follow one of the above substeps depending on whether you have a phone number or an email address on file.

If your account has been compromised and the attacker is still logged in, you’ll see their location listed here.

If you aren’t securing your account immediately after signing back into your compromised Yahoo account, you’ll be prompted to enter your email address and password before proceeding.

Two-step verification is a feature that makes it impossible for someone with just your login information to hack your account—they would also have to have access to your phone or your recovery email address.

If you’d prefer to receive your verification code via a phone call, you can click Call me instead.

If you opt to have Yahoo call you instead, accept the incoming call, then listen for the code.

If you clear your current browser’s cookies or remove a signed-in location from the Recent activity menu, you’ll have to re-validate your account with two-step verification the next time you log in.

If prompted to enter your password (or, on an iPhone, your Touch ID), do so before proceeding. If you’re prompted to enter a password and your usual password doesn’t work, you’ll need to recover your account on desktop instead.

If your account has been compromised and the attacker is still logged in, you’ll see their location listed here.

Again, you may need to enter your password or your Touch ID.

Again, you may need to enter your password or your Touch ID.

Tap Change password in the upper-right side of the page. Enter your new password in both text fields. Tap Continue

Enabling two-step verification makes it impossible for anyone who doesn’t have your phone or recovery email information to hack your account, even if they have your login email address and password.