I think my account was accessed without my permission

If you suspect your MemoryBank account was accessed without your permission, follow this sequence — it's the fastest path to safety.

Step 1: Change your MemoryBank password

1. Sign in if you can — /dashboard/settings.
2. Open the Security section and update your password.
3. If you can't sign in (an attacker may have changed it), use the "Forgot password" link on the sign-in page. The reset email goes to the email address on file.

Step 2: Enable two-factor authentication

If you didn't have MFA on already, turn it on now. See the "Setting up two-factor authentication" article. MFA significantly raises the bar — an attacker would also need your phone or authenticator app.

Step 3: Revoke all kid devices

Open /dashboard/devices and click Revoke on every paired device. You can re-pair them in a minute each. Revoking ensures that even if a paired device was used to view data, that access is gone now.

Step 4: Disconnect your brokerage temporarily (optional)

This is overkill in most cases, but if you want to be extra safe, disconnect any brokerage from /dashboard/connections. You can reconnect once you've verified the account is secure.

Step 5: Contact support

Reach support via the Contact page and let us know what happened. We'll:

• Review sign-in activity on your account and confirm any unusual access.
• Check for any changes made to the account (kid profiles, family members, billing) that you didn't authorize.
• Walk you through any additional steps based on what we find.

What an attacker could NOT have done

Even in a worst-case scenario, an attacker with full access to your MemoryBank account could not:

• Move money out of your brokerage. MemoryBank is read-only and has no trading permissions.
• See your bank or brokerage password. We don't store those.
• Bypass MFA on your brokerage. Connections require periodic re-authorization at the bank.

What they could see: balance, holdings, and your kids' names. That's a privacy concern — not a financial one. Taking the steps above closes that window quickly.

Email address compromise

If your email account itself was compromised (someone has your email password and is reading your messages), that's the bigger problem to solve first — they may be able to reset passwords on multiple services. Secure your email account before doing the steps above.