How to Remove a Hacker From Your Phone (8 Steps, 2026)

Quick answer: To remove a hacker from your phone, disconnect it from the internet, delete any app you don’t recognize, run a reputable mobile security scan, revoke suspicious permissions and device-admin access, then change your passwords — starting with your Google or Apple account — from a device you trust and turn on app-based two-factor authentication. If the problems continue, back up your files and do a factory reset. Work through the steps below in order.

Last Updated: September 2026 | Samuel Smith has cleaned up compromised phones and rebuilt account security for people after a hack.

First, confirm it’s really a hacker

Plenty of “hacked phone” symptoms have boring explanations — an aging battery, a buggy update, or a memory-hungry app. But take it seriously when you see a cluster of these: rapid battery drain and heat while idle, a spike in data use, pop-ups and redirects, apps you never installed, settings that change on their own, calls or texts you didn’t send, or being locked out of accounts. If several line up, keep reading. For a deeper checklist, see our guide on whether your phone is hacked, plus the platform-specific signs for Android and iPhone.

Step 1: Cut off the connection

Turn on Airplane Mode to drop Wi-Fi and cellular at once. This stops a remote attacker from sending commands or pulling more data while you clean up. Leave it on until you’re ready to change passwords from a trusted device. If you can, do your password resets on a different device you know is clean.

Step 2: Delete apps you don’t recognize

Most phone compromises ride on a malicious or spy app.

• Android: Settings → Apps → See all apps. Sort by install date and remove anything unfamiliar — be suspicious of apps with generic names, no icon, or names like “System Service” or “Device Health.”
• iPhone: Settings → General → iPhone Storage and scroll the full app list. On the Home Screen, long-press to check for hidden or newly added apps.

If an app won’t uninstall, it may be hiding behind admin rights — you’ll handle that in Step 4. For a thorough sweep, follow our guide to finding and removing spy apps.

Step 3: Run a trusted security scan

Install a reputable mobile security app from Bitdefender, Norton, Malwarebytes, or a similar known vendor, and run a full scan. This catches malware you can’t spot by eye and quarantines it. Avoid random “cleaner” or “booster” apps from search ads — some are malware themselves.

Step 4: Revoke risky permissions and admin access

Malware survives by granting itself powerful permissions. Take them back:

• Android device admin: Settings → Security → Device admin apps. Disable anything you didn’t set up — this is what blocks stubborn spyware from being deleted. Then uninstall it.
• Android accessibility & notification access: Settings → Accessibility and Settings → special app access. Turn off anything suspicious; spyware abuses these to read your screen and messages.
• iPhone profiles: Settings → General → VPN & Device Management. Delete any configuration profile you didn’t install.
• Both platforms: review camera, microphone, and location permissions and revoke anything that doesn’t make sense.

Step 5: Update your operating system

Hackers exploit known flaws in outdated software. Install the latest iOS or Android update and any pending app updates. A patched phone closes the holes that let the attacker in and can neutralize some infections outright.

Step 6: Change your passwords from a clean device

This is the step that actually locks the attacker out. Using a device you trust:

1. Secure the master account first — your Google account or Apple ID, because it controls your email, backups, and location.
2. Then change passwords for email, banking, and social media — every important account.
3. Use a unique password for each. A password manager makes this painless.
4. Sign out all other sessions in each account’s security settings so the attacker’s logins are killed.

Step 7: Turn on app-based two-factor authentication

Even if a password leaks again, 2FA blocks the login. Use an authenticator app or hardware key rather than text-message codes, which can be intercepted through SIM swapping. Our 2FA setup guide walks you through it.

Step 8: Factory reset if problems persist

If symptoms continue after all of the above, wipe the phone. Back up your photos, contacts, and documents first — but don’t blindly restore an app backup, since that can reinstall the malware. Reinstall apps manually from the official store.

From experience: I have walked a friend through this. The step people get wrong is restoring from a backup afterward, because that can drag the same problem right back onto the clean phone. Set it up as a new device instead, reinstall your apps fresh from the App Store or Google Play, and sign into each one as needed.

• iPhone: Settings → General → Transfer or Reset iPhone → Erase All Content and Settings.
• Android (Samsung shown): Settings → General management → Reset → Factory data reset.

See our safe walkthrough on using a factory reset to remove spyware before you pull the trigger.

If you suspect a current or former partner installed monitoring software, be cautious about how you remove it. Cutting off their access abruptly can tip them off and escalate risk. Consider planning first with someone trained in tech abuse. The National Domestic Violence Hotline is available 24/7 at 1-800-799-7233, and the National Network to End Domestic Violence (NNEDV) Safety Net program at nnedv.org can help you think it through safely.

How to keep hackers out for good

Once you’re clean, stay clean: keep your OS and apps updated, install apps only from official stores, use unique passwords with a manager, keep app-based 2FA on, lock your SIM with a carrier PIN, avoid clicking links in unexpected texts and emails, and skip logging into sensitive accounts over public Wi-Fi without a VPN. A little routine hygiene makes a repeat attack far harder.

On an Android phone, running a reputable mobile security app such as Bitdefender Total Security can scan for and remove malicious apps a manual check might miss. (On iPhone there is no traditional antivirus — the steps above are your fix.)

Frequently asked questions

Does a factory reset remove a hacker from my phone?

Almost always, yes — a reset wipes the software a hacker installed. The catch is restoring from an infected backup, which can bring the malware back, and re-entering compromised passwords. Reset, then change passwords and reinstall apps manually.

Can I remove a hacker without factory resetting?

Often, yes. Deleting malicious apps, running a security scan, revoking admin/permissions, updating the OS, and changing passwords resolves most cases. Save the factory reset for when symptoms persist.

Will changing my password alone kick the hacker out?

It’s essential but not always enough on its own. If spyware is still on the device, it can capture the new password too. Clean the phone first, then change passwords from a device you trust and sign out all other sessions.

How did my phone get hacked in the first place?

Common routes are malicious apps, phishing links in texts or email, someone with physical access installing spyware, reused passwords exposed in a breach, and unpatched software. Fixing the underlying habit is how you prevent a repeat.

Is my iPhone safer from hackers than an Android?

iPhones are hard to infect with typical malware, but they’re not immune — account takeover, spyware installed with physical access, and phishing all work on iPhone. The same removal steps apply.

Should I contact my bank or the police?

If money accounts were accessed, yes — alert your bank, watch for fraud, and file a report at IdentityTheft.gov (and a police report if you lost money or are being targeted). Document what you saw before wiping the phone.

Removing a hacker is a sequence, not a single trick: disconnect, delete unknown apps, scan, strip permissions, update, then change every important password from a clean device with app-based 2FA. Do it in that order and you don’t just evict the intruder — you close the door they came through.