Possible unwanted access to my account

I just received an email notification that my account may have been compromised. I don’t think I made any changes in the cloudflare account, but I certainly would like the team to check where it was changed:

Your password was changed by a user at the following IP address:

If you did not make this change, please contact us immediately at https://support.cloudflare.com/

Thanks for using Cloudflare.

The Cloudflare Team

You need to do as the email says and contact support. Posting on the community won’t be helpful in this context.

Also, reset all your passwords.

I tried locating for direct support about this specific issue and can’t seem to find it. Can you help me direct to the actual support page so I can submit a help request to this particular issue?


On the page mentioned in the email there’s a link “Contacting Cloudflare Support”.

Just in case anyone else is suspicious about an access to their account, these are the steps we always recommend you take:

  1. Immediately change your password: https://support.cloudflare.com/hc/en-us/articles/200167806-How-do-I-change-my-Cloudflare-account-password-
  2. Enable 2-Factor Authentication: https://support.cloudflare.com/hc/en-us/articles/200167866-How-do-I-setup-Two-Factor-Authentication-
  3. Change your API Key: https://support.cloudflare.com/hc/articles/200167836#12345682

We also recommend manually logging out of your dashboard, as this terminates all ongoing dashboard login sessions for your Cloudflare account.

If you do each of these, nobody will have ongoing access to your account.