THE SECURING GUIDE
Account access.
Step by step.
Three stages: verify ownership, secure the original email, then audit the account. The full instructions are below.
01 / 03
Credentials & ownership verification.
Confirm the Discord login and access to the associated email inbox. Make sure you are checking the inbox address linked to the account being reviewed.
Successful sign-in confirms access at that moment. Continue with the history and recovery checks before drawing conclusions about ownership.
Inbox history
Search for older Discord messages, including registration, verification and email-change notices. Compare them with the account’s history and look for the original registration email.
A matching date supports the history you are reviewing; it does not prove ownership. If registration, session or join dates disagree, keep that discrepancy unresolved until you have evidence explaining it.
Missing records
If the inbox is empty, the original email (OGE) remains unverified. Ask for the available records.
If an actual unauthorized change occurred, give Discord Support an accurate account of what happened. Preserve a truthful timeline of the change and the access you still have.
02 / 03
Securing the original email.
Secure the inbox and its recovery accounts before updating Discord. If you use a separate Gmail as a recovery account and an Outlook backup, secure those accounts first.
Use accounts you control. Keep accurate registration details and a unique password for each account in a password manager.
Original inbox
Change the inbox password to a strong, unique password. Keep it different from the passwords on your recovery accounts.
Add a recovery email you use regularly and a phone number you own and will keep. Confirm that both work before removing an outdated recovery method.
Existing access
Check signed-in devices, third-party access, forwarding, inbox filters and delegation. Remove anything you do not recognize.
Use the Google account security checks to review existing access alongside the new password and recovery settings.
Provider waiting periods
Google may still send codes to previous recovery information for seven days. Check the Google recovery settings and any Microsoft security-info waiting period shown for the account before considering a change complete.
Complete each verification prompt before continuing. If changes are temporarily blocked, follow the provider’s recovery instructions. A waiting period alone does not establish ownership.
Discord settings
Once email access is secure, change the Discord password. Enable a passkey or authenticator-based MFA and save the backup codes somewhere private.
Follow Discord’s MFA setup and any verification prompts shown on the account. Review active sessions and remove unwanted authorized apps.
03 / 03
Post-securing audit & account safety.
Request account data through User Settings → Data & Privacy → Request your data. Review account details, available message history, sessions and connections for activity you do not recognize.
A Discord data package can take up to 30 days. Manually deleted messages are excluded, so the package gives you a partial history to review.
Handling concerns
Use Discord’s reporting tools for abusive or illegal content. Stop opening attachments; do not download, save or redistribute suspected child sexual abuse material.
Original email access, passwords, MFA and recovery settings all matter. None alone guarantees ownership or recovery. If access is disputed or compromise is suspected, preserve a truthful timeline and use the official support process.