Unrecognized sign-ins, sessions you did not start, or sudden lockout should be treated as a compromised login until proven otherwise. Act on a real StreamEast mirror first — fake sites steal the recovery password you are about to set.
Open StreamEast from an official directory
Use gostreameast.link or gostreameast.is — not random search results or APKs. Pick a listed domain before you change anything.
If you can still sign in
- Change the password immediately at My Account → Password — new unique password (8+ characters, upper, lower, number). You should get a security notice email; other sessions end.
- Open My Account → Security → Active Sessions → End All Others (or End each unknown device).
- Enable Two-Factor Authentication on the same page so future logins need email MFA (about 10 minutes per login code).
If you cannot sign in
Use Forgot password with your account email (codes about 15 minutes). That recovers the account when an attacker changed the password. After you are in, enable 2FA and clear leftover sessions.
Extra red flags
- You typed the password on a fake site: assume it is leaked — keep the new password, keep 2FA on, and change that password anywhere else you reused it.
- Fake “StreamEast apps” or lookalike domains: stop using them. See Is there an official StreamEast app? and Why avoid fake StreamEast sites?.
- Attacker changed the password and you no longer receive mail: contact support from a working email and explain the timeline. Do not keep trying random near-duplicate accounts.
Contact support
Include the account email, whether you can still sign in, about when unknown activity started, what you already changed (password / sessions / 2FA), and whether you entered credentials on a non-directory domain or APK. Login: Contact Us → Login problems. Payment anomalies: Contact Us → payment topic. Premium feature help after you regain access: My Account → Support (max 24 hours).
Also: How do I enable 2FA and manage sessions? · How do I reset my password? · Site won’t open — try another mirror