Your account was hacked or you got a sign-in alert

I think someone got into my CoreX account.

Change your password, turn on two-factor, sign out other devices, and tell support.

Before you start: Access to your email.

Step by step

1. Reset your password with "Forgot password?" on the sign-in page; this works even if the attacker changed it.
2. Open Security and sign out all other devices.
3. Turn on two-factor sign-in under Security and save the recovery codes offline.
4. Check Users on each server for sub-users you did not add and remove them.
5. Check Activity for actions you did not take (power, file or setting changes).
6. Change the password of your email account too, and turn on two-factor there.
7. Contact support with what you noticed.

Check it worked: Only your devices are signed in and two-factor is on.

Why it happens: Reused or phished passwords are the usual cause.

Always tell support about a suspected account takeover.

More guides on Security, abuse, and compromised accounts:

• Phishing: emails or messages pretending to be CoreX
• Griefers, force-op and malicious plugins
• Players using hacked clients
• Keep your server private and safe
• Report abuse from a CoreX server