Reddit locked my account for 'unusual activity': the 2026 fix

If you logged into Reddit in November 2026 and got hit with a "We've locked your account" wall, a password reset loop, or a mobile app that keeps kicking you back to the login screen, you're not alone. There's an active wave of automatic locks that started in mid-November, and the standard "reset your password" flow is not, by itself, enough to fix it.

Here's what's actually happening, how to tell which flavor of lock you're stuck in, and the sequence that gets accounts back.

What the November 2026 lock wave looks like

Users on r/help are reporting three overlapping symptoms:

1. The lock banner: "We've locked your account due to unusual activity. Please reset your password." Appears on login, sometimes mid-session.
2. Password reset loop: you complete the reset email flow, log in with the new password, and immediately get the same lock banner again.
3. Mobile-first weirdness: the official Android and iOS apps fail to authenticate, but old.reddit.com or new.reddit.com in a desktop browser sometimes works, and sometimes doesn't. Upvotes vanish. Comment history looks half-loaded. A separate thread on r/help documents the same cluster of mobile bugs.

The locks are being triggered by Reddit's automated fraud/abuse system, not by a human moderator or admin. That's important, because the recovery path is different.

Why this wave, why now

Reddit's account-integrity system runs continuously and cross-references signals like new device fingerprints, VPN or residential proxy IPs, sudden geographic jumps, unusual voting patterns, and password-reuse hits from external breach lists. Any two or three of those firing together can trip a lock. The November 2026 wave appears to be a tuning change on the fraud model, not a targeted enforcement action, which is why so many long-established accounts got caught alongside newer ones.

This matters because the fix is procedural, not political. You don't need to appeal a moderator decision. You need to convince the automated system that you're the account owner and that your current session isn't the suspicious one.

The diagnostic decision tree

Before you touch anything, figure out which lock state you're actually in. Running the wrong fix wastes an email round-trip and sometimes hardens the lock.

Rendering diagram…

If your login works but Reddit acts broken (missing votes, comments not saving, feed half-empty), you're in state E. That's not a lock at all, it's a session-integrity flag. Skip to the session fix at the bottom.

The recovery sequence that actually works

The reason people get stuck in the reset loop is that they reset the password from the same device, on the same network, that tripped the lock in the first place. The automated system sees the same fingerprint and re-locks the account within minutes.

Run this in order:

1. Switch to a clean environment first

Before requesting the reset email:

• Get off any VPN, proxy, or corporate network.
• Move to your home wifi on a residential IP, or to cellular data if you usually use wifi.
• Use a desktop browser you rarely use for Reddit. Firefox or Safari in a private window works. Do not use the Reddit mobile app for this step.
• If you can, use the same physical location and IP range you typically used before the lock. Consistency is what the fraud model wants to see.

2. Request the password reset from that clean environment

Go to reddit.com/password and enter your username. Reddit sends a reset link to the signup email. If you no longer have that email, skip to the account recovery form: reddit.com/account-recovery.

3. Set a genuinely new password

Do not reuse an old Reddit password, and do not use a password that shows up in a breach dataset (check with Have I Been Pwned). Password-reuse detection is one of the top three triggers for this lock, and if your new password is on a breach list, you'll be re-locked inside an hour.

4. Log in on desktop first, not mobile

This is the step almost everyone gets wrong. After the reset, log in on the same desktop browser you used to request the reset. Let the session sit idle for 15 to 30 minutes. Reload the front page a couple of times. Vote on one or two posts. This gives the fraud model a stretch of "normal" behavior to weigh against the earlier signals.

Only then, sign in on your phone. If you sign in on mobile first, especially through the official app, the app's device fingerprint often gets flagged as a second unrecognized device and the whole thing loops.

5. Turn on 2FA immediately

Once you're back in, go to reddit.com/settings/account and enable two-factor authentication. Locked accounts that also have 2FA enabled recover faster on the second incident, because 2FA is a strong ownership signal for the fraud model.

6. If steps 1 through 5 fail, file the recovery form

Use reddit.com/account-recovery and include: the account username, approximate signup year, subreddits you moderate (if any), and any old email addresses associated with the account. Reddit's support team is running a backlog on this wave, so expect three to seven days.

The session-level flag fix (state E)

If you can log in but Reddit is broken (votes vanishing, comments failing to save, feed half-loaded), your account is fine but the session is flagged.

• On mobile: clear the Reddit app's data (Android) or delete and reinstall the app (iOS). Log in on desktop first, then re-add mobile.
• On desktop: sign out, clear cookies for reddit.com, sign back in.
• If it persists past 48 hours, treat it as a partial lock and run the full recovery sequence above.

What not to do

A few common instincts make this worse:

• Don't spam the reset button. Multiple reset requests inside an hour re-trigger the fraud model.
• Don't switch VPN exit nodes trying to find one that works. Each new IP is a fresh unrecognized-device signal.
• Don't create a new account to appeal from. Reddit's system correlates accounts by device and IP, and an appeal from a fresh account can flag both.
• Don't assume it's a shadowban. A shadowban is a different state (you can log in normally but your posts are invisible to others). If you're not sure which you're dealing with, our writeup on how to avoid Reddit ban walks through the distinctions.

Preventing the next lock

Once you're back in, a few things reduce the odds of repeat locks in the current wave:

• Keep your login environment stable. If you always used your home IP, stop routing Reddit through a VPN.
• Use a password manager and a password that isn't on any breach list.
• Enable 2FA (TOTP, not SMS).
• Don't run brand-new automation from the same account you use to log in on mobile. If you're operating a Reddit workflow at scale, use API credentials tied to a purpose-built account rather than your personal login, so a fraud-model hit on the workflow account doesn't lock the account you actually browse from. This is standard operational hygiene, not a workaround. If you want a managed setup for the workflow side, Bazzly handles the monitoring and reply scheduling on separate credentials so your daily-driver account stays clean.

The November wave will settle as Reddit re-tunes the fraud thresholds, but locks like this recur every few months. The recovery sequence above works for all of them, because the underlying fraud model behaves the same way each time. Save it somewhere you can find it from a locked-out browser.