To verify if your account has been hacked, follow these steps:
1) First, open your browser and click the RoboForm extension icon.
2) Click the 3 dots in the upper right corner of the extension's menu.
3) Select "Help" from the menu.
4) Click "Manage RoboForm Account" and you will be automatically logged in to your RoboForm Online account in a new tab.
5) At the top of the page, hover your mouse over the "My Settings" tab and select "Sessions" from the dropdown menu which will appear.
6) On the sessions page, you will see an Authorized Devices list and a list of Recent Device Activity.
Under Authorized Devices, review the devices listed and ensure that you recognize each of them. If you see a device which you are certain that you did not authorize, your account has been hacked.
Under Recent Device Activity, review the IP addresses listed and ensure that you recognize each of them. If you see an IP address which you are certain is not yours, your account has been hacked.
NOTE: To view a full list of the last 90 days of device activity, scroll to the bottom of the page and click the green "Download Detailed Log" button.
This will download a CSV file containing a detailed access log of your account. This access log provides you with the Date/Time of access, IP address, Device Name, Device Type, Operation Type, Operation, Operation Source, and Operation Destination. Unfamiliar access dates/times, IP addresses, and device names are the best indicators that your account has been hacked.
1) Turn on OTP if it is not already enabled. For step-by-step instructions on how to turn on OTP, click here.
2) Change your Master Password. For step-by-step instructions on how to change your Master Password, click here.
3) If you noticed devices in your Authorized Devices list which you did not authorize, remove them. You can do so by checking the box to the right of the unwanted device in your Authorized Devices list and then clicking the red "Delete Selected" button.
4) Change the passwords on all sites which you have saved Logins for, especially accounts which contain sensitive information (financial, insurance, email, etc.), using the RoboForm Password Generator.
For step-by-step instructions on how to use the RoboForm Password Generator to generate new passwords, click here and scroll down to the "Using a Password Generator to Update an Existing Password" section.