What to Do If Your Website Gets Hacked

Nordlyte Web Studio · Security Guide · 9 min read

Finding out your website has been hacked is stressful, but panicking rarely helps. If you're thinking "my website is hacked, what do I do now," here's the answer: a clear, calm walkthrough of what to check, how to fix it fast, and how to make sure it doesn't happen again.

Signs your site may have been hacked

• Unfamiliar pages, links, or redirects you didn't create
• A Google warning ("this site may be hacked") in search results
• Your hosting provider flags unusual activity or suspends your account
• Visitors report strange pop-ups or being redirected elsewhere
• Login credentials that suddenly stop working

Immediate steps to take

1 Don't panic — but act quickly

The longer a compromised site stays live, the more damage it can do to your reputation and search rankings. Move through the next steps promptly, but methodically.

2 Change all passwords immediately

Update your hosting account, website admin (e.g. WordPress), FTP, and any connected email passwords — assume all of them may be compromised, not just one.

3 Take the site offline temporarily if needed

If the hack is actively harming visitors (malware, redirects, phishing content), it's often safer to put the site into maintenance mode or take it offline until it's cleaned, rather than leave it live.

4 Restore from a clean backup

If you have a recent, clean backup from before the hack, restoring it is usually the fastest way back to normal — followed immediately by a password reset, since restoring alone doesn't fix the vulnerability that let the hack happen.

5 Identify and close the vulnerability

Common causes include outdated plugins, weak passwords, or an unpatched theme. Update everything to the latest version and remove any plugins or tools you no longer use — fewer moving parts means fewer entry points.

6 Request a review if Google flagged you

If your site shows a security warning in search results, use Google Search Console to request a review once you've confirmed the issue is fixed — this can take a few days to clear.

The quick fix, if you're short on time

If you just need the fastest path to fixing a hacked website: change every password immediately, restore from your most recent clean backup, update everything (plugins, themes, core software) to the latest version, then request a Google review if you've been flagged. That order matters — restoring a backup without also changing passwords and patching the vulnerability just invites the same hack again.

How to prevent it from happening again

• Keep your platform, plugins, and themes updated — see our maintenance guide
• Use strong, unique passwords and enable two-factor authentication where available
• Keep regular, automated backups so recovery is fast if something goes wrong
• Limit the number of admin accounts and remove unused ones
• Use a reputable, security-conscious hosting provider

Should I hire someone to handle this?

If you're not comfortable diagnosing and fixing the issue yourself, it's worth getting a developer involved quickly — the cost of professional cleanup is usually far less than the cost of prolonged downtime or lost customer trust.

Frequently asked questions