Can AI help me recover a hacked account?
Half. It can give you a calm, ordered recovery plan and write your message to support, but only the company can give you your account back.
01Why half-bot
- Recovery has a standard order: secure email first, then passwords, then two-step login.
- AI writes clear support requests with the details companies ask for.
- It can't access the account or speed up the company's process.
02The prompt
Replace everything in [BRACKETS] with your own details, then paste it into your AI app.
You are a personal cybersecurity responder. Which account: [SERVICE] What happened: [WHAT I NOTICED, WHEN] Can I still log in? [YES/NO] Is my email account still mine? [YES/NO] Your task: give me a recovery plan. Rules: - MUST start with securing my email account if it's at risk. - MUST tell me to use only the company's official recovery page, found by typing its address myself. - NEVER ask for my passwords or codes. - If anything is missing, ask me up to 3 short questions first. Give me: a step-by-step plan for the next hour, and a short message to the company's support team. Before you send your answer, silently check that you did ALL of these, and fix your answer if not: - Make the first step securing the email account that the other accounts use for reset. - Tell me to go only to the service's official recovery page by typing the address myself, never through an emailed or texted link. - Only ask a question if a needed detail is truly missing; otherwise do the task with no questions.
03Steps
- Use a device you trust.
- Paste the prompt and follow the plan in order.
- Turn on two-step login everywhere once you're back in.
04What can go wrong
- Fake 'recovery services' are common. Use only the company's own site.
- If money was taken, call your bank right away as well.
05What to use
06Our test runs
2 runs, each with a different made-up sample. 1 of 2 passed every check.
The made-up sample:
[SERVICE]Dropbox[WHAT I NOTICED, WHEN]I received an email notification that my password was changed on 2026-09-02 at 03:15 UTC, and now I’m locked out of the account.[YES/NO]NO
- First step must be securing the email account
- Instruct to use only the official recovery page by typing its address
- Never ask for passwords or verification codes
- Only ask questions if information is missing
- Didn't make up details we never gave it
What came back (excerpt):
Immediately go to your email provider's official website by typing its address in your browser. Use their account recovery process to regain control of your email account.
Read the full answer
To recover your Dropbox account, we'll follow a step-by-step plan. Since your email account is compromised, we'll start by securing it. **Step-by-Step Recovery Plan for the next hour:** 1. **Secure your email account**: Immediately go to your email provider's official website by typing its address in your browser. Use their account recovery process to regain control of your email account. This is crucial because your email is used for password resets and security notifications. 2. **Verify email account recovery**: Once you've regained access to your email, verify that you can send and receive emails to ensure the account is fully under your control. 3. **Go to Dropbox's official recovery page**: Type `https://www.dropbox.com` in your browser to access the official Dropbox website. From there, navigate to their account recovery or help page to find the password reset or account recovery option. 4. **Follow Dropbox's recovery process**: Use the recovery option to reset your password and regain access to your Dropbox account. Make sure to follow the instructions carefully and create a strong, new password. 5. **Review account settings and security**: After regaining access to your Dropbox account, review your account settings, especially the connected devices and apps, to ensure no unauthorized access is present. **Message to Dropbox Support Team:** "Hello, I'm reaching out because I received a notification that my Dropbox password was changed without my knowledge on 2026-09-02 at 03:15 UTC, and I'm currently locked out of my account. My email account, which is associated with my Dropbox account, has also been compromised. I'm in the process of recovering both accounts and would appreciate any guidance or support you can offer to secure my Dropbox account and protect my data."
Check that the email‑securing step is first and the recovery link is typed manually.
The made-up sample (a messier one):
[SERVICE]CloudDrive Pro[WHAT I NOTICED, WHEN]On 2026-10-28 I received a push notification that my password was changed. When I tried to access the app on 2026-11-02 I was locked out, and I also noticed several unknown files uploaded from a Berlin IP address.[YES/NO]NO, YES
- First step must be securing the email account
- Instruct to use only the official recovery page typed manually
- Never ask for passwords or codes
- Provide step-by-step plan and short support message
- Didn't make up details we never gave it
What came back (excerpt):
1. **Secure Your Email Account**: Immediately change the password of the email account associated with your CloudDrive Pro account. Ensure you use a strong, unique password and consider enabling two-factor authentication (2FA) if it's not already on.
Read the full answer
To address the situation with your CloudDrive Pro account, I've created a step-by-step recovery plan for the next hour. Since your email account is potentially compromised due to the unauthorized access to your CloudDrive Pro account, securing it is the first priority. 1. **Secure Your Email Account**: Immediately change the password of the email account associated with your CloudDrive Pro account. Ensure you use a strong, unique password and consider enabling two-factor authentication (2FA) if it's not already on. This step is crucial because your email account is likely used for password recovery and other sensitive operations across your online services. 2. **Recover Your CloudDrive Pro Account**: To regain access to your CloudDrive Pro account, you will need to use the official recovery page. Type the URL of CloudDrive Pro's official website yourself, then navigate to their account recovery or help section. Look for an option like "Forgot Password" or "Account Recovery" and follow the instructions provided. Make sure to only use the recovery options found on the official website that you have typed in manually, avoiding any links from emails or text messages. 3. **Monitor and Secure Other Accounts**: After securing your email and attempting to recover your CloudDrive Pro account, review your other online accounts for any suspicious activity. Consider changing passwords for any accounts that use the same or similar login credentials as your compromised CloudDrive Pro account. 4. **Contact CloudDrive Pro Support**: Reach out to CloudDrive Pro's support team using their official contact information found on their website. Report the unauthorized access and password change, and inform them about the unknown files uploaded from a Berlin IP address. Request their assistance in securing your account and removing any unauthorized files or access. Message to CloudDrive Pro Support: "I am writing to report unauthorized access to my CloudDrive Pro account. On 2026-10-28, I received a notification about a password change, and by 2026-11-02, I was locked out. Additionally, unknown files were uploaded from a Berlin IP address. I request immediate assistance in securing my account, removing unauthorized access, and restoring my control over the account. I have taken initial steps to secure my associated email account and will continue to monitor for suspicious activity."
The answer includes an introductory sentence before the required email‑security step, violating the “must start with securing email” rule.
How each run works: we fill the prompt with a made-up sample, run it once in Llama 3.3 70B, and GPT-OSS 120B grades the answer against the prompt's own rules. Word limits are counted by code, and every quote flagged as made up is checked against the full answer. Your results can differ. How we test.