Handling Your Compromised Account

This article provides guidance to faculty, staff, and students if an unauthorized person has gained access to their NetID password. It covers how to change your NetID password and check your email for fraudulent activity. 

Compromised Accounts Overview

When someone that is not you gains access to your credentials (i.e., username, NetID, passwords), your account is considered to be compromised. This means that unauthorized persons are able to use your credentials to pose as you, and the privacy of your data is at risk. ITS monitors email traffic, and if our systems find a suspicious pattern or behavior, we will notify you that your account has been compromised. If you receive this notification, or if you notice that you are unable to log into your UConn email and UConn services with your NetID credentials, the sections below provide some steps that you can immediately take to protect your information. Additionally, be aware of any unprompted Duo notifications you may receive on your device as that may indicate somebody is trying to access your account.

Signs Your Account Was Compromised

There are several signs that your UConn accounts were compromised. Here are a few to keep an eye out for:

• You receive notification from Information Technology Services (ITS) that your account was compromised.

• You can suddenly no longer sign into your accounts like NetID and your UConn email.

• You get prompts from Duo to verify a sign-in that you did not initiate.

• People report strange emails sent from your email account that you do not recognize.

Securing Your NetID Account

If your account is compromised, but you are still able to log into your NetID account, follow these steps to secure your NetID:

1. Log in to the NetID Management website.

2. Click Change Password. 

3. Enter your current password. 

4. Enter your new password.  Make it completely different from your current password to prevent it from being guessed.

5. Confirm your new password.

6. Click Change Password. 

Securing Microsoft 365 Account (Student Workers, Faculty/Staff, Students)

1. Log into your Microsoft 365 account from the UConn email website. 

2. Navigate to the Gear Icon. 

3. Select View all Outlook settings.

4. Click Mail on the left tab if it has not been selected already.

5. Under Compose and Reply, check the Email signature. 

6. Check the Rules tab to ensure that the only rules listed are those that you personally have set up.

   1. Review all unfamiliar rules, if any are listed. 

   2. Delete any unfamiliar rules you do not wish to keep.

7. Check the Sweep tab to ensure that the only rules listed are those that you have personally set up.

   1. Review all unfamiliar sweep rules, if any are listed. 

   2. Delete any unfamiliar sweep rules you do not wish to keep.

8. Review all settings listed on the Junk email tab. You should ensure that UConn emails are not blocked and that no spam/unknown emails have been classified as "safe senders."

9. Check whether the Forwarding tab is disabled. This tab should only be enabled if you personally enabled it. 

Account Security Tips

Related Articles