What to do if your Linux system is compromised

It's rare on a home Linux desktop, but if you think something's wrong, acting calmly and quickly limits the damage. Signs might include your machine behaving strangely, accounts you can't get into, or a program you don't recognise asking for admin rights.

Reading is great. Tracking makes it stick. Sign up for a free Dashboard to tick off tasks and see your Security Score.

Get my free Dashboard →

CE: AllModerate

Cyber Nova AI helps you prepare for Cyber Essentials. It doesn't award or certify it. Follow the steps here to get ready, then apply for certification through an accredited Cyber Essentials body when you're set.

First, contain it

Stop the problem spreading.

Disconnect from the internet. Turn off Wi-Fi or unplug the network cable. This stops anything phoning home or spreading.
Don't log in to sensitive accounts from that machine until you're confident it's clean.

2 steps

Then, from a device you trust

Protect the accounts that matter.

Change your important passwords, starting with email, using a phone or another computer. Your email is the key to resetting everything else.
Turn on two-factor authentication for those accounts if it isn't on already.

2 steps

Clean up

Get back to a known-good state.

Back up your personal files (documents, photos) but not programs, so you don't carry the problem across.
Reinstall Linux from scratch. For a real compromise, a fresh install is the only way to be sure the system is clean. Encrypt the disk during setup, then restore your files from the backup.

2 steps

If it's a work machine

If the machine holds business or client data, treat it seriously. Under UK rules, a breach of personal data may need reporting to the ICO within 72 hours. If you're unsure, get advice rather than guessing.

Track your Linux security progress. Free.

Create a free account to tick off tasks, see your Security Score improve, and know exactly what you've done and what's still to do.

Start your free security check

← Back to Linux Security Hub