Nick wrote:When you change your account password, it already logs out all other sessions.
If somebody was logged into your account it means they know your password, so you'll need to change your password anyway, which will log them out.
If the hacker knows your password, they can just change the password themselves. To my knowledge, all you need is your current password and nothing else to change it.
The only thing you need an email for is.. to change the email. When I changed my email I didn't need my password. Only the email, and it got sent to the new email put in.
So the hacker can change the password, thus locking you out of your own account AND change your email to theirs.
Correct me if I'm wrong, but I did this all recently and this is from my own experience.