Recover a hacked or locked VaultCord account
Use this guide if you forgot your password, lost access to your email, lost 2FA / a security key, or think someone took over your account.
Important: VaultCord support will never ask you to send your recovery key, password, or login token. Keep those private.
Which path should I use?
Situation | Where to go |
You can still open the email on the account | |
You want a new email, and you can still open the old inbox | |
You cannot open that inbox, lost 2FA / security key, or the account was stolen | |
You signed up with Google / Apple / another site | Reset or secure that site’s login (VaultCord 2FA settings won’t show for social login) |
Direct links also appear on the Forgot Password page: Change your email? and Can't access this inbox?
1. Forgot password (you still have the email)
Enter the account email and complete the captcha
Open the email VaultCord sends and use the link
Choose a new password
Notes
The reset link expires after 15 minutes
Prefer the same browser/device type you used when requesting the reset (VaultCord may warn if that changes)
After a successful reset, existing sessions are ended so you can sign in fresh
If you get “email changes disabled” or similar, use chat support—or try Account Recovery if you can’t use email-based tools.
2. Change email (you can still open the old inbox)
Enter the current email and the new email, then the captcha
VaultCord emails a confirmation link to the old address
Open that link within 15 minutes to finish
Limits
The new email must not already be used on another VaultCord account
Team-member accounts can’t use this change-email flow
Double-check typos (e.g.
gmail.comvsgmail.co) before submitting
If you cannot open the old inbox, skip this page and use Account Recovery instead.
3. Account Recovery (locked out, hacked, or no inbox access)
Step A — Identify the account
Enter either:
The account email, or
Your VaultCord verify link (
https://vaultcord.win/myurlor justmyurl)
Complete the captcha and continue. VaultCord will locate the account (you’ll see a masked email) and check whether your current network matches past activity.
Step B — Prove ownership (pick one method)
Method | What you need | Network match required? |
Purchase order ID | An order ID from a VaultCord purchase on that account | No |
Account recovery key | The key previously downloaded from Settings | No |
Confirm a webhook URL | A developer / Discord webhook URL you saved on the account | Unlocked when your ASN/location matches known account activity |
Discord bot ownership DM | A custom bot on the account; VaultCord DMs a code to the Discord application owner (or team members if team-owned) | Depends on whether Discord ownership proof is available for your bots |
Order ID and recovery key work even when your network doesn’t match.
Step C — Choose a recovery action
After you verify ownership, you can:
Change email to an address you control
Turn off 2FA
Turn off security key
You can run more than one action in the same recovery session (for example change email, then disable 2FA).
When an action completes, you’re signed into the dashboard so you can continue securing the account.
Step D — Check the deleted bin
After recovery, open the deleted bin and restore any servers or bots a hijacker may have removed. Deleted items are only recoverable for a limited time (about 30 days).
Then go to the dashboard and finish locking things down (next section).
4. Lost 2FA or security key
If you… | Do this |
Can still sign in with password + email | Settings → turn off / re-set 2FA or security key (you’ll need the current code or key to disable normally) |
Can’t sign in because of 2FA / security key | Use Account Recovery → Turn off 2FA or Turn off security key |
Use Google / Apple / social login | VaultCord won’t show its own 2FA toggles—enable 2FA on Google/Apple/etc. Recovery for “lost authenticator” is through that provider, plus VaultCord recovery if the VaultCord side is locked |
5. If the account was hacked (checklist)
Open Account Recovery and prove ownership
Change email to an inbox only you control
Turn off 2FA and security key if the attacker may have set them
Use Forgot Password on the new email to set a password only you know
Restore anything in the deleted bin (servers/bots)
In Settings: re-enable 2FA and/or a security key, and Download Recovery Key—store that file offline
Review servers, bots, team access, and billing/orders for anything the attacker changed
6. Prevent this next time
While logged in, open Settings:
Enable two-factor authentication (authenticator app)
Optionally set up a WebAuthn security key / passkey
Click Download Recovery Key and keep the file somewhere safe (not in Discord DMs)
Keep email change / password reset emails enabled so you get alerts
Anyone with your recovery key may be able to recover the account—treat it like a password.
Common questions
“I typed the wrong email when I signed up.”
If you can still get mail at that address, use Change Email. If not, use Account Recovery with a verify link, order ID, recovery key, webhook, or Discord ownership proof.
“Forgot Password says no account with that email.”
Try the exact address you registered, or start Account Recovery with your vaultcord.win/... link.
“Support asked for my recovery key.”
That isn’t VaultCord support. Don’t send it. Contact us only via the chat on https://help.vaultcord.com/.
“I bought Premium—where’s my order ID?”
Use the order ID from your VaultCord purchase receipt / payment confirmation for that account.
Still stuck?
Use the chat icon (bottom right) on https://help.vaultcord.com/. Say whether the issue is password, email, 2FA, security key, or hacked, and which recovery method you already tried—without pasting recovery keys or passwords.