How to Recover a Hacked Facebook or Instagram Account
Think your Facebook or Instagram account has been hacked?
Maybe your password suddenly stopped working, your email or phone number was changed, unfamiliar posts appeared, or you received a notification about a login you don't recognise.
Don't panic — and don't pay a stranger who claims they can recover your account.
Meta has official recovery processes for compromised Facebook and Instagram accounts. The most important thing is to use the official recovery flow and avoid actions that can make the process harder.
If Your Facebook Account Was Hacked
Meta's official recommendation is to go to:
facebook.com/hacked
Meta says you should, if possible, start the recovery process on a device you've previously used to log into Facebook.
Step 1: Open Facebook's hacked-account recovery page
Go directly to Meta's official recovery page:
Facebook hacked-account recovery
Follow the security steps presented for your account.
Step 2: Try to identify your account
Use information associated with your account, such as your email address, phone number or name, when prompted.
If the hacker has changed some of your account information, don't assume the account is permanently lost. Meta's recovery flow is designed to help with compromised-account situations.
Step 3: Follow the security checks
Facebook may present different recovery options depending on what information is still available on the account.
Follow the options Facebook gives you rather than repeatedly trying random passwords or third-party recovery services.
Step 4: If you no longer have access to your email or phone
If the hacker changed your contact information or you can no longer access the email address or phone number connected to the account, use Facebook's account-recovery options for people who have lost access to their account information.
Meta provides a separate recovery route for users who can't access their account email address or mobile phone number.
Facebook account recovery help
If Your Instagram Account Was Hacked
Instagram has its own official hacked-account recovery page.
Go directly to:
Instagram hacked-account recovery
The page provides support for account-access problems, including hacked or disabled accounts, login problems and impersonation.
Follow the instructions displayed and provide the information Instagram requests.
Depending on the circumstances, Instagram may ask you to verify that you are the owner of the account.
Check Your Email Before Doing Anything Else
If you still have access to the email address that was previously connected to your account, check your inbox for security notifications from Facebook or Instagram.
For example, if you receive a notification that your email address or password was changed, check whether the message provides an option to reverse or secure the change.
Don't click links in suspicious emails.
Instead, open Facebook or Instagram directly through the official app or website and use the account-recovery process.
What If the Hacker Changed Your Email and Password?
This is one of the most common reasons people think their account is completely gone.
Don't immediately create a new account or start paying someone to “hack it back.”
First, use the official recovery process.
For Facebook, Meta specifically directs hacked users to facebook.com/hacked and recommends using a device previously used to access the account when possible.
For Instagram, use the official hacked-account recovery page at instagram.com/hacked.
Common Mistakes That Can Slow Down Account Recovery
1. Using a completely unfamiliar device
For Facebook, Meta recommends starting recovery from a device you've previously used to log into the account, when possible.
If you still have access to your old phone or computer, use it.
2. Using random “account recovery experts”
Be extremely careful with people on Instagram, WhatsApp, Telegram or Facebook claiming:
“Send me your email and I'll recover your account.”
or
“Pay me and I'll contact Meta for you.”
Your login credentials should never be handed to a stranger.
Use Meta's official recovery channels.
3. Giving someone your verification code
Never give your login or verification code to someone who contacts you claiming to be Meta support.
A scammer who gets your code may be able to take over your account or complete a recovery attempt.
4. Clicking recovery links sent by strangers
A message saying “Your account has been hacked, click here to recover it” could itself be a phishing attempt.
Instead of clicking the link, open Facebook or Instagram yourself and navigate to the official recovery process.
5. Repeatedly submitting random information
If Meta asks for information to verify your identity, provide accurate information.
Don't repeatedly submit random details or create multiple recovery attempts through different unofficial routes.
6. Creating a new account too quickly
If your original account contains years of photos, followers, messages, business contacts or other important information, don't immediately give up on it.
Try the official recovery process first.
What If the Hacker Is Posting From Your Account?
Don't engage with the hacker or send them money.
If you still have access to the account, immediately:
- Change your password.
- Review logged-in devices and sessions.
- Remove unfamiliar devices.
- Check your email and phone number.
- Enable two-factor authentication.
- Review connected apps and accounts.
- Remove suspicious posts or messages.
- Check whether payment or advertising information has been changed.
If you've completely lost access, start with Meta's official recovery flow instead.
What If Your Facebook Page Was Hacked?
A hacked Facebook Page can require a different recovery process from a personal Facebook account.
Meta has a separate recovery process for hacked Facebook Pages managed by users.
This is particularly important for businesses and creators because an attacker may remove legitimate administrators or change the Page's access.
After You Recover Your Account
Getting your account back is only half the job.
Immediately:
Change your password.
Use a strong password that you don't use on another website.
Turn on two-factor authentication.
This adds another security layer to your account.
Check your login sessions.
Remove devices and sessions you don't recognise.
Check your email and phone number.
Make sure the hacker hasn't added their own recovery information.
Review connected accounts and apps.
Remove anything you don't recognise.
Warn your contacts.
If the hacker sent messages or posted scams from your account, let your followers and friends know that those messages weren't from you.
The Bottom Line
If your Facebook or Instagram account has been hacked, don't pay a stranger and don't give anyone your password or verification code.
Use Meta's official recovery channels:
Facebook: facebook.com/hacked
Instagram: instagram.com/hacked
For Facebook, Meta recommends using a device you've previously used to log into the account when possible.
The faster you secure your email, phone number and other connected accounts, the better.
Use the official recovery process, protect your verification codes and don't let a second scam happen while you're trying to fix the first one.