Fixing a Hacked Site

Recovering from a hack requires cleaning files, securing accounts, and preventing reinfection.

This article explains the core cleanup and recovery stages after a compromise, from containment and credential resets to restoration and hardening.

Recovery steps

1. Take the site offline or enable maintenance mode.
2. Change all passwords (WordPress, hosting, FTP, database).
3. Scan files and remove malicious code.
4. Restore from a clean backup if the infection is widespread.
5. Update core, themes, and plugins. Remove unused software.
6. Request Google review if a Safe Browsing warning was issued.

Shield Pro subscribers get malware removal included. Others can submit a one-off fix.