How to Recover a Hacked Facebook or Instagram Account

Getting hacked is stressful, especially if your account is linked to your business. Act fast: the sooner you start, the better your chances of getting it back.

First: check if you can still log in

If you can still get in, change your password straight away, turn on two-factor authentication and log out of all other devices. Then check your email and phone number on the account haven't been changed.

If you can't log in to Facebook

1. Go to facebook.com/hacked on a computer or phone browser.
2. Follow the steps to tell Facebook your account was compromised.
3. Facebook will try to confirm it's you using your old email, phone number or by identifying friends.
4. Check your email for messages from Facebook (security@facebookmail.com). If the hacker changed your email, look for a message with a link to undo the change.

If you can't log in to Instagram

1. Go to instagram.com/hacked.
2. Choose what happened, like "My password isn't working" or "My account was hacked".
3. Follow the steps. You may be asked for a video selfie to prove the account is yours.
4. Check your email for a message from Instagram about the change, with a link to reverse it.

Once you're back in

• Change your password to something new and unique.
• Turn on two-factor authentication.
• Check Where you're logged in and log out of devices you don't recognise.
• Remove any apps or email addresses you didn't add.
• Check your posts and messages for anything the hacker sent, and tell your friends to ignore it.

Warn your contacts

Hackers often message your friends asking for money or codes. Post on another platform or send a quick message telling people your account was hacked.

Avoid fake "recovery" services

People who offer to recover your account for a fee are almost always scammers. Only use the official Facebook and Instagram pages.

Stop it happening again

• Use two-factor authentication on every important account.
• Never log in through links in messages.
• Be careful with messages saying your page will be deleted for copyright problems. That's a common trick.