The possibility of your Mozilla account getting hacked or compromised is high nowadays, considering the new ways of enacting cyberattacks. In this case, there is also a chance your credentials might end up on the Dark Web. To not only stop, but also prevent such events, Mozilla will send you an email notifying you that your current password has been reset. This article will explain to you how to get your account back and secure it with a new and stronger password.

Review the email Mozilla sent to you

Mozilla will send you an email from accounts@firefox.com asking you to reset your password, if it detects your credentials have been leaked on the dark web.

It will also automatically disconnect all devices on your account to prevent further damage. You are then required to reset your password to enable this prevention.

Reset the password for your Mozilla account

1. You should receive an email from Mozilla, letting you know that your password has been reset. Please note that the email will contain no link or button to start the process.
2. You'll have to navigate on your device of choice and sign in to your Mozilla account from there.
3. Mozilla will notify you that your account has been locked for security reasons.
4. Click on the Forgot password? link, and reset your password.

Why is it important to reset the password ASAP

As we mentioned earlier, Mozilla will only send you emails asking you to reset the password if your account has been flagged with suspicious activity.

While this can mean someone else has tried to access your account, it can also mean your credentials have been compromised and leaked to the Dark Web.

In such a situation, time is your best friend. Resetting the password as soon as possible will stop your account from being accessed by foreign parties and remediate the damage that has already been done.

After regaining access to your account, review any registered passkeys and linked accounts to make sure you recognize them. If you notice anything you didn’t create or don’t recognize, see Suspicious activity on my Mozilla account for steps to help secure your account.

Sign in with a one-time email code

Mozilla account supports a passwordless sign-in option for selected services. Instead of entering a password, you can use a one-time code sent to your email address.

When you enter your email on a supported service, Mozilla automatically determines the correct sign-in method. If your account is eligible for the passwordless flow, you’ll receive a one-time code by email. Enter that code on the verification screen to complete sign-in. If the code expires, you can request a new one.

You can use passwordless login when creating a new account for a supported service, or when your existing account lacks a password and is not linked to Google or Apple.

Review your passkeys after securing your account

If you have passkeys registered to your Mozilla account, review them after resetting your password.

Although passkeys are designed to be resistant to phishing, if you suspect credential theft, verify that all registered passkeys belong to devices and security keys that you recognize.

To review your passkeys:

1. Sign in to your Mozilla account after resetting your password.
2. Open Settings.
3. Go to Security > Passkeys.
4. Review the list of registered passkeys.

If you find a passkey that you do not recognize:

1. Delete the passkey.
2. Review your account's security settings.
3. Consider enabling or reviewing your two-step authentication settings.

For more information, see Use a passkey to sign in to your Mozilla account.

Related articles

• How to change or reset your Mozilla account password
• Review your Mozilla account activity and protect your data
• Avoid getting locked out of your Mozilla account
• My sign in was blocked for security reasons on Mozilla account