Change your password straight away. That signs out every phone and browser except the one you’re using, and the old password stops working. Then go through the checks below, in this order.
You might have noticed an email about a sign-in that wasn’t you, a device you don’t know under Where you’re logged in, or posts and messages you didn’t send.
If you can still sign in
- Change your password. Go to Settings → Security → Password. Pick one you don’t use anywhere else.
- Check where you’re signed in. In Settings → Security, look under Where you’re logged in and tap End next to anything that isn’t yours.
- Check your email and phone number. Both are on the same screen. If either isn’t yours any more, change it back. Whoever has them can reset your password.
- Turn on two-factor authentication. Then a password alone isn’t enough to sign in.
- Look through your account. Delete posts, comments or messages you didn’t write, and check your profile and settings.
If two-factor authentication was already on, get new recovery codes too, in case someone saw the old ones.
If you can’t sign in
If your password has been changed, use Forgot Password? on the sign-in screen. Enter your email address, or your phone number if it’s on the account, and set a new password with the code we send. A reset signs out every device, theirs too, and lifts a Too many attempts pause.
If your email address was changed, the code no longer comes to you by email. We emailed your old address about the change. Reset with your phone number instead, if it’s still on the account.
Warning: If someone else turned on two-factor authentication, a new password isn’t enough. Signing in will still ask for a code from their authenticator app.
If none of this gets you back in, write to us at ayyam.com/support, which works without signing in. Choose My account was hacked and give the account’s username. We read these first.
The emails we send
If your account has an email address, we write to it when any of these happen. Most of them say what to do if it wasn’t you.
- New sign-in to your Ayyam account, with the kind of device and roughly where.
- Your password was changed
- Your email address was changed, sent to the old address.
- A phone number was added to your account or Your phone number was changed
- Two-factor authentication is on or Two-factor authentication was turned off
- Your Ayyam account will be deleted in 48 hours
If you get that last one and didn’t ask for it, sign in, go to Settings → Account & profile and tap Keep my account. Then change your password.
Nobody at Ayyam will ever ask you for a code we send you. Don’t give one to anyone, whatever they say.