Account is hacked

[dstolker]

Dear Spotify,

A stranger has been using my account for the last couple of days. As a solution I changed my password and it actually  seems to work, but I'm really worried about how this could happen and how to prevent it. I'm pretty sure I did not use my account on other devices than my family's. 

Can you give me more information on what happened and what made this possible?

Thanks,

Daan

[osornios]

@dstolker

I don't think there's a way to know.

Best practice would be to check your email address is correct (not been altered by someone else) and change the password to a more secure one (numbers and letters).

Then, there is option to sign out from all devices in your account's main control panel (at the very bottom).

That should logout of everything, including other people's devices.

[dstolker]

Thanks for your reply. E-mail adress is not altered and I allready changed my password and signed out to all devices. Allthough I found out that my sonos was still able to play music from my spotify account without adjusting the password in Sonos. This morning I found at that my Spotify account was used by this stranger again....

[SuperWisdom]

Hey @dstolker,

Please clarify, which devices do you currently/generally have connected to your Spotify account?

[dstolker]

I have a windows laptop, two iphones, one android tablet, one android phone and a sonos system connected. The message that appears when I'm disconnected says a PS4 is connected. I asume this is a Playstation 4 and I've never connected my device to a PS4. 

Thanks!

[osornios]

@dstolker

Does it show the PSN (PlayStation Network) username that is connected? Or an email address?

If so, a Sony rep can unlink the PS4 from your account.

Go here, scroll to bottom and start a live chat with a rep.

https://support.us.playstation.com/articles/en_US/KC_Article/Support-tips/

Tell them your issue then ask them to look up the accounts using the PSN online id or the email you may have gathered.

If they find one that has Spotify linked, they can manually unlink it.