Quick answer
To recover Google rankings after a hack: fully clean the site and remove any blacklist warning, remove hacked spam pages so they return 404/410, submit a clean sitemap, request reindexing of your real pages in Search Console, and rebuild any lost trust signals. Rankings usually recover over a few weeks as Google recrawls the clean site.
Key takeaways
- Clean the site and clear any Google warning before working on rankings.
- Getting spam pages to 404/410 and reindexing your real pages speeds recovery.
- Most sites recover rankings within weeks once the site is verifiably clean.
A hack doesn't just risk your data — it can wreck your search rankings, through spam pages, a blacklist warning, or lost trust. The good news is that recovery is very possible once the site is genuinely clean. Here's the path.
Clean the site and clear any warning
Nothing else works until this is done. Remove all malware and spam, and if Google flagged the site, request a security review so the warning is lifted first.
Remove hacked spam pages
Make the injected spam URLs return 404 or 410 so Google drops them, and regenerate a clean sitemap containing only your real pages.
Request reindexing
In Search Console, request indexing of your genuine key pages so Google recrawls and restores them. This speeds up what would otherwise happen slowly on its own.
Rebuild trust signals
Make sure your important pages are healthy, fast, and internally linked. A clean, well-structured site recovers faster than one left in disarray after cleanup.
Be patient but watchful
Most sites recover within a few weeks. Monitor Search Console for the indexed-pages count and any recurring issues, and confirm the spam and warnings stay gone.
Free security check
Worried your site is infected?
Get a free security assessment — I'll tell you if your WordPress site is compromised and exactly what it needs. No obligation.
Follow-up questions
People also ask
Typically a few weeks once the site is clean and Google has recrawled it. Severe cases with a long-standing blacklist can take longer.
Keep reading
WordPress Security for Small Businesses: A Practical Guide
You don't need an IT team to secure a small-business WordPress site. Here's a practical, no-jargon plan that covers the essentials.
How to Secure a WooCommerce Store
A WooCommerce store handles money and customer data, which makes it a target. Here's how to secure it without hurting sales.
How to Tell If a WordPress Plugin Is Safe to Install
Every plugin is a door into your site. Here's how to judge whether one is safe before you install it.