Today morning I received a very troubling message in my inbox. I saw that there was a message that my account password for ZoHo has been successfully reset.

I don't remember making any such request that I had forgotten my password to the site, also there is no history of any mail that password reset link was sent to my registered email address.

I haven't used ZoHo in a long time and I went to check that what their password reset policy is via mail and I did manage to reset my password successfully through my mail.

Now this means only one thing, that someone had access to my email(Gmail) account.

Does this mean my account has been compromised? I use Gmail on my Windows desktop and my Android Phone. I also have 2FA enabled.

What can I do to find out if my email has been compromised and what can I do to protect against it?