HBO Max Account Hacked?
What to Do When the Email
Has Been Changed

Last updated: 23 October 2026 · Author: Baizaar Lee · Primary sources: HBO Max help centre pages on devices, account sharing and password resets

BAIZAAR may earn a commission if you sign up to Proton through links on this page, at no extra cost to you. Every recovery step below is free, earns us nothing, and comes first anyway.

There’s a profile on your HBO Max account that you didn’t make, or a Fire TV Stick three states away that you’ve never owned, or, worst of all, an email from HBO Max saying your address has been changed when you haven’t changed a thing. Annoying doesn’t cover it. Most people searching HBO Max account hacked are in one of three situations, and each has its own fix, so this page takes them in order: you can still sign in, you’re locked out but the email is still yours, or the email belongs to somebody else now.

That third one is the nasty one, and it’s the one HBO Max’s help pages say least about. The bit that stops all of this happening again comes further down, and it’s the bit most guides skip entirely. Already back in? Jump to locking your HBO Max account down.

---

How do you know if your HBO Max account has been hacked?

The devices list will tell you faster than anything else, so start there. Sign in on a phone, tablet or computer, pick your profile and go to Account > Devices, where HBO Max lists every signed-in device with the profile it used, the date it signed in and the country it signed in from, which is a surprising amount of evidence for a streaming service to hand you on one screen.

Any of these should worry you.

• A device you’ve never owned, or a country you’ve never streamed from. One strange Fire TV Stick three states away is a hacked account until somebody proves otherwise.
• Household messages out of nowhere. HBO Max’s own account sharing page says that if you haven’t updated your household several times, “someone outside your household may have updated your household,” which is about as close as a help page will ever get to saying somebody else is in.
• Profiles you didn’t create, or a Continue Watching row nobody in the house will own up to.
• A sign-in screen that disowns you. In October 2025 viewers reported HBO Max showing “It seems like this HBO Max account belongs to someone else”, though that wording comes from user reports gathered by PiunikaWeb and HBO Max doesn’t document it, so treat it as a reason to check and nothing more.
• Emails you didn’t ask for. A password change, an email change, a “Your One-Time HBO Max Code” that nobody in the house requested.

One odd device on its own can be innocent enough, the hotel telly from last spring, say, or the old Roku you handed your brother at Christmas and forgot was still signed in. Two or more of those signs together is a different conversation. If the household prompts are the main thing bothering you, that’s a slightly different problem with its own guide, the HBO Max household error, and it’s worth five minutes before you go any further.

Still suspicious? Assume the worst and work through the three fixes below in order. None of them costs a penny.

What to do if you can still sign in to HBO Max (Fix 1 of 3)

Change the password before you do anything else, including before you go poking about in the devices list. HBO Max says that changing it at HBOMax.com/account/edit/password signs your HBO Max account out of every device, so the stranger, your teenager and that hotel telly all get booted together, which is crude and is exactly what you want at this point.

1. Go to HBOMax.com/account/edit/password on a computer, or in the app pick your profile, then Account and the Edit icon next to Password, and set a password you’ve never used anywhere else. Long beats clever.
2. Sign back in on your own devices.
3. Open Account > Devices and read the list again. Anything unfamiliar that survived gets the X beside it, or use Sign Out All Devices and start clean.
4. Check your profiles and your billing history for anything you didn’t make or didn’t buy, add-ons included.
5. Make sure the email on the account is still yours. If it isn’t, skip to Fix 3, because you’re in the harder situation.

There’s one quirk worth knowing about, and it’s mildly infuriating. Anyone halfway through an episode keeps watching until it finishes and only then gets signed out, so if your intruder is forty minutes into a film when you change the password they get the credits as well, which stings for about as long as it takes to remember they can’t get back in without the new one.

HBO Max documents the device list and both sign-out options on its devices help page. If you’d sooner boot people without touching the password, our guide to kicking someone off Netflix or HBO Max covers the gentler route, and why it rarely holds for long.

What if you are locked out of HBO Max but still have the email? (Fix 2 of 3)

Then the HBO Max account is still yours on paper, and a password reset gets you back in. Go to HBOMax.com/forgot-password, or choose Forgot Password? when the sign-in screen asks for your password, put in the email address on the account, and HBO Max sends a reset link to it.

There’s a quicker door too, if the reset email is dragging its heels. At the same password prompt, choose Get One-Time Code and HBO Max emails you a six-digit code (subject line “Time Sensitive: Your One-Time HBO Max Code”), which signs you in without the old password at all.

Give it a few minutes. Then look everywhere, Promotions, Junk, Spam, the lot, because HBO Max mail has a habit of turning up in the one folder you’d never think to check, usually just after you’ve decided it was never sent and started drafting a furious message to support.

Once you’re in, run Fix 1 anyway, devices list first. A reset proves you own the email. It proves nothing about who else is still watching on your bill.

What if the hacker changed the email on your HBO Max account? (Fix 3 of 3)

Then every reset link goes straight to the attacker and you can’t fix this from your side of the screen, which makes it the version of an HBO Max account hacked that sends people to Reddit at midnight. HBO Max’s answer, if you no longer have access to the email on the account, is to contact them.

Before you do, try one thing that costs you ten seconds. If you ever added a mobile number to your HBO Max account, HBO Max’s own advice is to try signing in with that number instead of the email address, and if it works you’re back in Fix 1 with a password to change and a devices list to read. Plenty of accounts never had a number added, mind, so don’t be crushed if it goes nowhere.

Use the Contact Us link at the lower right of the HBO Max help pages and do it today. Every day they hold the account is another day to change the password again, rename your profiles and move the household onto their own sofa.

The agent on the other end has to decide whether you’re the owner or a very convincing stranger, so make the decision easy for them. Have this lot ready before you open the chat:

• The email address that used to be on the account, and roughly when you signed up.
• Billing receipts, or the bank statement lines showing the HBO Max charges.
• The card type, its last four digits and the billing ZIP code or postcode.
• Any HBO Max emails about the change, whether that’s a new email address, a new password or a new sign-in. Screenshot them and click nothing inside them.
• The date things went wrong.

Check who bills you for HBO Max

If HBO Max comes to you through a TV provider, a phone carrier, an app store or Amazon, then that company handles the payment, and it might well be the quicker route for billing questions or for stopping the charge altogether. HBO Max already treats direct billing differently in places, its Extra Member add-on is only sold to people billed directly, for one, so don’t be surprised if the answer you get depends on who takes your money.

Not sure who that is? Search your inbox and your bank statement for the last HBO Max charge. Whoever’s name is on that line gets your second phone call.

Does reinstalling the HBO Max app get rid of a hacker?

No. Deleting the app clears your phone, and the intruder was never on your phone in the first place.

Their session lives on HBO Max’s servers, attached to your HBO Max account, and it only ends when the password changes or you sign their device out, so reinstalling is a perfectly good fix for playback faults and sign-in loops and does precisely nothing about a stranger watching on your bill.

How did someone get into my HBO Max account? (Probably Through a Site You’ve Forgotten)

Almost never by hacking HBO Max. They signed in with your password, because it had already worked somewhere else.

In January 2026 the security researcher Jeremiah Fowler found an exposed database holding 149,404,754 unique logins and passwords, HBO Max, Netflix and Disney+ credentials amongst them, most likely scooped up by infostealer malware sat on people’s computers (CX Today reported the find). Attackers feed lists like that into login pages automatically, thousands at a time, and if your HBO Max password matches the one you used on some shopping site that leaked years ago, your account has been open since the day it leaked.

Stolen streaming logins are cheap, too. A May 2026 analysis of roughly 75,000 dark-web listings, reported by Cord Cutters News, put the average streaming account at about $15. Nobody picked you out. You’re a row in a spreadsheet, sold for less than a takeaway.

Malware does the same job from the other end. In September 2026 HBO Max’s own verified Reddit account was hijacked and spent about 48 hours running 108 ads for a Mac HBO Max app that doesn’t exist, sending people to a lookalike site that installed password-stealing malware (SecurityWeek covered the campaign). No subscriber data was reported taken, but anyone who installed HBO Max from anywhere other than an official app store should treat that computer as a suspect too.

Then there’s the code scam. The genuine one-time code arrives from HBO Max with “Your One-Time HBO Max Code” in the subject, and HBO Max warns against sharing it with anyone outside your household, so anybody who messages asking you to read it back to them, however friendly or official they sound, is trying to spend your account.

You can see whether your email address turns up in known breaches at Have I Been Pwned, which is free, run by an independent security researcher, and will tell you, sometimes uncomfortably, which old passwords to stop trusting.

If you’ve just realised your HBO Max password is the same one guarding your takeaway app and a forum you joined years ago, sort it tonight, and let a password manager remember the new ones for you. See Proton Pass’s current plans →

How to lock your HBO Max account so it stays locked

Changing the password gets today’s intruder out. Keeping the next one out of your HBO Max account comes down to three habits, and only one of them costs anything.

• A password used nowhere else. Get this right and the next breach of some unrelated website becomes a non-event for your HBO Max account.
• An email address nobody else can get into. The account email is the master key, because whoever controls it controls every reset link, so give it a strong password of its own and switch on two-factor authentication if your email provider offers it.
• A look at the devices list now and then. Twice a year, or whenever a household prompt turns up uninvited.

No sane person remembers forty unique passwords, and even Netflix’s help centre admits as much: “A password manager can make it easier to keep track of unique passwords.”

The one BAIZAAR uses is Proton Pass. It generates and fills a different password for every site, keeps your 2FA codes in a built-in authenticator and hands out hide-my-email aliases, so the address you give a streaming service is never the one guarding your bank. It’s Swiss, end-to-end encrypted, and there’s a free plan if you only want the basics. Pass Plus, the paid tier, is $1.99 a month on a 12-month plan through our link (£1.59 in the UK) and adds dark web monitoring for exposed details, and with the 30-day money-back guarantee you can run it for a fortnight and walk away if it isn’t for you.

One limit, said plainly. A password manager can’t rescue an account whose email has already been taken, it stops the next takeover and claims nothing more.

Which HBO Max account fix do you need?

Find your row and do that row. Ignore the rest.

Your situation	What to do	How long it takes
You can still sign in	Change the password at HBOMax.com/account/edit/password, which signs out every device, then check Account > Devices	Minutes
Locked out, email still yours	Reset at HBOMax.com/forgot-password, then check Promotions, Junk and Spam	Minutes, once the email lands
The email has been changed	Try signing in with your mobile number, then contact HBO Max support with billing proof and your original email address	Unknown. HBO Max publishes no timeframe
Billed by a TV provider, carrier, app store or Amazon	Contact HBO Max, and raise any charges with the company that bills you	Depends on that company
Odd household prompts, nothing else wrong	Read Account > Devices, sign out anything unfamiliar, change the password if in doubt	Five minutes

Swipe the table sideways for the last column.

In the third row? Stop reading and open the support chat now, this page will still be here afterwards.

What HBO Max support won’t do for you

Go into that chat with your expectations set sensibly low. HBO Max is a streaming service with a help desk, and your hijacked account is one ticket amongst thousands.

Why an HBO Max Account Hacked by a Stranger Goes Unnoticed (When Sharing Doesn’t)

HBO Max puts serious engineering into catching you sharing a password with your sister. Its household system weighs IP addresses, device IDs and account activity, and it’ll happily lock out a paying customer on holiday (we took that apart in our look at the HBO Max sharing crackdown), yet protecting you from a stranger who already has your password gets far less visible effort.

We couldn’t find a viewer-facing two-factor sign-in option anywhere in HBO Max’s help centre during our checks, and if one exists it’s hidden well enough that we’d forgive you for missing it too. So your password and the email address behind it are holding up almost everything, which is exactly why a reused password is the way in.

None of that is a reason to cancel, mind. It just means the security of your HBO Max account is mostly your job, and the kit for that job is cheap or free.

HBO Max Account Hacked? What We’d Do Tonight, in Order

If someone only knows your password, an HBO Max account hacked is a two-minute fix: change it, and every device is signed out. If they’ve changed the email, you’re looking at a support ticket, some proof and a fair bit of patience, so start that chat today.

Then give your HBO Max account a password it shares with nothing else, lock down the email behind it, and the next leaked database becomes somebody else’s Sunday night.

HBO Max account hacked FAQ

What should I do first if my HBO Max account was hacked?

Change the password at HBOMax.com/account/edit/password if you can still sign in. HBO Max says that signs the account out of all devices, intruder included, and then you can check Account > Devices and your profiles at your leisure.

My HBO Max account was hacked and the email changed. Can I get it back?

Usually only through HBO Max support, because every reset link now goes to the attacker’s inbox. If a mobile number was ever added to the account, try signing in with it first. Otherwise HBO Max says to contact it, so have billing receipts, the card’s last four digits and your original email address ready before you start.

Can someone use my HBO Max account without me knowing?

Yes, and the devices list is how you find out. Account > Devices shows each signed-in device with the profile it used, its sign-in date and its country, and anything you don’t recognise can go.

Does changing my HBO Max password sign everyone out?

Yes. HBO Max says changing the password signs the account out of all devices, though anyone mid-stream keeps watching until their title ends.

How do I sign out of all devices on HBO Max?

Choose your profile, go to Account > Devices and select Sign Out All Devices, or the X beside a single device. Changing the password does the same job and stops them signing straight back in.

Can a hacker change my HBO Max household?

HBO Max’s own help page suggests so. If household messages appear when you haven’t updated your household, HBO Max says someone outside your household may have updated it, which is your cue to change the password and read the devices list.

Will HBO Max refund charges from a hacked account?

We couldn’t find a published HBO Max refund policy for hacked accounts. Ask support anyway, and if you pay through a TV provider, carrier, app store or Amazon, raise the charges with them too.

Is an HBO Max Extra Member I did not add a sign of hacking?

It’s a reason to check your billing history straight away. The Extra Member add-on costs $7.99 a month, is currently offered in the US and needs direct billing, so one you never bought belongs in your support chat.

Does HBO Max have two-factor authentication?

Not that we could find. We checked HBO Max’s help centre in October 2026 and found no viewer two-factor sign-in option, so for now a unique password and a well-guarded email address are your defence.

Will reinstalling the HBO Max app remove a hacker?

No. The intruder’s session sits on HBO Max’s servers, so only a password change or signing their device out removes them.

How did someone get my HBO Max password?

Most likely from a breach of another site where you used the same password, or from infostealer malware. One January 2026 leak exposed 149,404,754 logins, HBO Max credentials included.

How we verified this

Every HBO Max step on this page comes from HBO Max’s own help centre, read on 16 October 2026 and re-checked on 23 October 2026: the devices page, the account sharing page and the password pages. The “belongs to someone else” sign-in message comes from user reports gathered by PiunikaWeb in October 2025, and it’s labelled as secondhand wherever it appears.

Breach, malware and dark-web figures come from the press reports listed below, and Proton prices were read from Proton’s own offer pages on 23 October 2026. HBO Max changes its menus often, and its owner’s merger closed on 6 October 2026 with a combined streaming service promised at some point, so check the help centre if a screen looks different from the one described here.

Sources

• Review, add and sign out of devices, HBO Max help centre, read 16 October 2026, which is where the devices list, Sign Out All Devices and the mid-stream caveat come from.
• Sharing your HBO Max account: the household messages and the warning about someone outside your household.
• Change your password, HBO Max help centre: the Account menu route and the confirmation that a new password signs every device out.
• Reset your password, HBO Max help centre: Forgot Password?, the one-time code, signing in with a mobile number, and the advice to contact HBO Max if you’ve lost the account email.
• Hacked HBO Reddit account used for malware delivery, SecurityWeek, September 2026.
• Massive credential leak exposes 149 million stolen logins, CX Today, 26 January 2026.
• From binge-watching to breached, Cord Cutters News, 22 May 2026.
• HBO Max password sharing crackdown enforcement begins, PiunikaWeb, 18 October 2025, collecting user reports of the “belongs to someone else” sign-in message that HBO Max itself does not document.
• Have I Been Pwned, free breach lookup.

Related BAIZAAR guides

• How to kick someone off Netflix, HBO Max or Disney+
• HBO Max household updated too many times: the fix
• Is HBO Max cracking down on sharing in 2026?
• The most secure password managers in 2026