Discord account security

The steps that actually close the ways a Discord account gets taken — in the order worth doing them.

8 steps · about 5 minutes Two-Factor Authentication

What an attacker gets with your Discord account

Servers Friends Messages Phone Number Email Connections

Has Discord itself been breached?

No. Discord does not appear anywhere in Have I Been Pwned’s catalogue of 1,027 known leaks.

That is about Discord the company. Your own email address can still be sitting in a leak from somewhere else entirely — a shop, a forum, an old account you have forgotten. That is the part worth checking, and it is free.

If the account is already gone

Discord takes about 24-96 hours to answer a recovery request. Start it before you do anything else on this page — nothing here gets back an account somebody else is holding.

Go to Discord Login — Visit discord.com and click "Login"
Click "Forgot Password" — Request a password reset email
Check Email — Look for reset email (check spam)
If Email Changed — Contact support at dis.gd/support with details
Provide Proof — Include previous emails, phone numbers, Nitro receipts
Enable 2FA — After recovery, immediately enable 2FA

Have these ready before you start. Discord will ask for them, and the request stalls without them:

Previous email addresses
Phone number on account
Nitro payment receipts
Server ownership proof
Previous usernames/discriminators

Start Discord account recovery →

How Discord accounts are taken

Nitro Scams
Qr Code Phishing
Fake Bot Invites
Token Grabbers

Already lost the account? Start Discord account recovery → — go there first. Nothing on this page recovers an account that’s already gone.

The checklist

critical

Enable Two-Factor Auth

Protect your account with authenticator app
high

Save Backup Codes

Store backup codes securely for account recovery
high

Review Authorized Apps

Remove any suspicious OAuth applications
medium

Check Active Sessions

Log out from unknown devices
medium

Add Phone Backup

Add phone number for account recovery
medium

Configure DM Privacy

Block DMs from non-friends to prevent scams
low

Review Friend Request Settings

Limit who can send friend requests
low

Audit Server Permissions

Review admin permissions in your servers

What this guide can’t do

Every step above hardens the account from here on. None of them touch the data that has already leaked — the email, password and phone number sitting in someone else’s breach dump, which is where most Discord takeovers actually start. You can’t unleak a breach. You can find out what’s in there and take away what it’s worth.

See what’s already exposed — free scan

Checks 13.1B+ leaked records. No card, no account to look.