If you suspect an account checker has validated your credentials, use this nuclear option. It will invalidate all active tokens, forcing every device (including the hacker's) to log in again. Then, change your password before the attacker re-authenticates.