Is It Illegal to Log Into Someone Else’s Account Without Permission?
Lawggle
support@lawggle.com
Is It Illegal to Log Into Someone Else’s Account Without Permission?
Yes, it can be - even if you already know the password. Having working login credentials does not automatically mean you have permission to access someone else’s email, social media or other online account.
In her video answer on Lawggle, Star Kashman of Cyber Law Firm explains why authorization matters and how permission can change after a breakup or the end of employment. Her explanation addresses U.S. federal law, including the Computer Fraud and Abuse Act.
Watch: Star Kashman Explains Account Access and Permission
[EMBED STAR KASHMAN’S VIDEO HERE]
Featured lawyer: Star Kashman | Cyber Law Firm
View Star Kashman’s original answer on Lawggle.
What If I Already Know Their Password?
You might know someone’s password because they shared it during a relationship, asked you to help with an account or gave you access for work. That history matters, but it does not automatically authorize every future login.
Star Kashman emphasizes the distinction between knowing the credentials and having permission to use them. Before accessing an account, the important question is whether you currently have authorization -and what that authorization covers.
An unchanged password is not proof of continuing permission.
What Does the Computer Fraud and Abuse Act Say?
The Computer Fraud and Abuse Act, or CFAA, is a U.S. federal law addressing certain forms of unauthorized computer access. Whether particular conduct violates it depends on the facts and the requirements of the relevant provision. www.justice.gov
In her Lawggle answer, Star Kashman discusses accessing accounts without authorization and exceeding authorized access. These terms have specific legal meanings; they do not make every improper use of an account a federal crime.
The U.S. Supreme Court clarified in Van Buren v. United States that exceeding authorized access concerns obtaining information from parts of a computer system that are off-limits to the user. An improper purpose alone does not establish that violation where the person was otherwise entitled to access the information. www.supremecourt.gov
Can I Log Into My Ex’s Account If They Gave Me the Password?
Do not assume permission given during a relationship continues after a breakup. What was originally authorized, any limits on that permission and whether it has been withdrawn can all matter.
Star Kashman specifically discusses this situation in her video. Her practical advice is to avoid accessing an ex-partner’s account based on permission you had while dating.
If you need messages or documents for a dispute, ask a lawyer about lawful ways to obtain them. Knowing where evidence might be does not automatically authorize you to enter someone else’s account to collect it.
Can I Access a Former Employer’s Account If My Login Still Works?
An account remaining active does not establish that your former employer still authorizes you to use it. Credentials provided for your job may continue to function after your permission to access company systems has ended.
Star Kashman uses the end of employment to illustrate why old credentials should not be treated as ongoing authorization. If you need information from a former workplace account, request it through an authorized representative.
The same distinction applies when a contract or business relationship ends: technical access and permission are separate questions.
What If I Had Permission Before?
Previous permission can be relevant, but you need to consider its scope. Permission to help with a specific task does not necessarily authorize access to unrelated information or other accounts.
For example, being asked to retrieve a document is different from being allowed to read every private message in the account. Likewise, permission granted for a particular period may not continue indefinitely.
Useful questions include:
- Who authorized the access?
- Which account or system did the permission cover?
- Was it limited to a particular task or period?
- Has authorization been withdrawn?
- Does the proposed access involve information outside the original permission?
These questions help identify what needs to be assessed. They do not determine the legal outcome by themselves.
Does Written Consent Help?
Clear written authorization can help document permission and its limits. Star Kashman recommends obtaining written consent and staying within the access that has been authorized.
For a business or security-testing arrangement, that documentation can identify the systems involved, who approved access, the permitted activities and when access must stop. Authorization should come from someone entitled to grant it.
Written consent is useful evidence, but it is not a blanket guarantee that every action taken afterward is lawful.
What About Ethical Hacking?
Star Kashman also discusses authorized security testing. Her practical guidance is to establish permission clearly and stay within the agreed boundaries.
Separately, the U.S. Department of Justice’s CFAA charging policy directs federal prosecutors not to charge good-faith security research as defined by that policy. It is prosecutorial guidance, rather than universal protection against civil claims or liability under other laws. www.justice.gov
Calling an activity “ethical hacking” does not, by itself, establish permission or resolve every legal issue.
Can You Get in Trouble If You Only Look?
Do not assume that avoiding changes or downloads makes an unauthorized login lawful. Depending on the applicable law, accessing an account and obtaining information can matter even when nothing is altered.
Star Kashman warns that unauthorized access can lead to civil or criminal consequences. Whether a particular incident supports a claim or charge depends on the conduct and the applicable legal requirements.
What Should I Do If Someone Accessed My Account?
Document what you noticed, including login alerts, unfamiliar sessions, changed settings or messages you did not send. Preserve relevant notifications and communications.
From a device you trust, consider:
- Changing your password to a unique password.
- Reviewing and ending unfamiliar sessions.
- Checking recovery email addresses and phone numbers.
- Enabling multifactor authentication.
- Reviewing connected applications and account permissions.
- Using the platform’s recovery process if you have lost access.
If the incident involves threats, stalking, financial loss or an ongoing legal dispute, seek advice about preserving evidence and your options. Avoid entering the other person’s accounts in response.
Frequently Asked Questions
Is logging into someone else’s account illegal?
It can be. Authorization, the information accessed, the circumstances and the applicable law all matter. Knowing the password does not automatically establish permission.
Is it still unauthorized if they previously shared their password?
Potentially. Previously sharing a password does not necessarily authorize every later login, particularly after permission has been withdrawn.
Can I log into my ex’s account to find evidence?
Do not assume a relationship dispute gives you permission to access an ex-partner’s account. A lawyer can explain lawful ways to seek relevant records.
What if my former employer forgot to disable my login?
A working login is not proof of continuing authorization. Request any information you need through an authorized contact.
Does written permission make all access legal?
No. Who granted permission, what it covers and other applicable legal requirements still matter.
About Star Kashman
Star Kashman of Cyber Law Firm provided the video explanation featured in this article. Her Lawggle answer discusses account access, passwords, consent and the risks of assuming previous permission still applies.
Learn more about Star Kashman at Cyber Law Firm, or watch her original answer on Lawggle.
This article draws on Star Kashman’s video answer and includes additional Lawggle editorial context. It is not a verbatim transcript and does not imply that Star reviewed or endorsed the additional material.
Have a Question About Unauthorized Account Access?
Whether someone entered your account or you are unsure about permission to use one, the details can change the answer.
On Lawggle, you can explore answers from verified lawyers, ask a legal question and find a lawyer for your situation.
Real Questions. Real Answers. Real Lawyers.
This article provides general information about U.S. law, not legal advice. Laws and outcomes vary by jurisdiction and circumstances. Reading this article or watching the video does not create a lawyer-client relationship.