Account Security — Signs of Compromise and Recovery Steps

Problem summary

Unexpected playlist changes, unknown devices, or emails about password resets signal account compromise.

Change password immediately and revoke sessions.

Enable 2FA where available via the connected account (e.g., Google/Facebook).

Check email for phishing; scan devices for malware.

Contact Spotify Support to secure account and reclaim.

Go to Account page → Sign out everywhere.

Change your Spotify password and any reused passwords elsewhere.

Check account connections (Facebook, Apple, Google) and disconnect unknown apps.

In Settings → Devices, remove unauthorized devices.

If unable to access email or account, use Spotify Support form and provide proof of ownership.