Instagram Account Hacked? What to Do to Get It Back (Facebook Recovery Included)

One morning you open Instagram and your password doesn’t work. Or a friend messages you: “Did you just send me a weird link?” That sinking feeling is horrible — but hacked accounts get recovered every single day, and both Instagram and Facebook have official recovery paths built exactly for this situation.

This guide walks you through what to do, in the right order, without falling for the scams that target people in this exact moment of panic.

How to Tell If You’ve Really Been Hacked

Sometimes it’s just a forgotten password or a glitch. Real signs of a hack include:

– Your password suddenly stops working even though you didn’t change it
– You get an email saying your email address, phone number, or password was changed — and it wasn’t you
– Posts, stories, or messages appear that you never created
– Friends tell you they’re getting strange messages or links “from you”
– Your profile photo, bio, or username changed on its own
– You get login alerts for devices or locations you don’t recognize

If one or more of these happened, treat it as a hack and move fast. The sooner you act, the easier recovery tends to be — hackers often change your contact details within hours to lock you out permanently.

First Things First: Secure Your Email

Your first move shouldn’t be on Instagram or Facebook at all — it should be your email inbox. Your email is the master key: password resets, login links, and security codes all flow through it. If the hacker also controls your email, anything you do on social media can be undone in minutes.

So before anything else, log in to your email and:

– Change its password to something long and unique
– Turn on two-factor authentication
– Check recent login activity for unfamiliar devices
– Look for forwarding rules you didn’t create — hackers sometimes set these up to silently receive copies of your reset emails

Only once your email is secure should you move on to recovering your social accounts.

Getting Your Instagram Back

Instagram’s official recovery hub lives at instagram.com/hacked. You can type that address into a browser, or reach the same flow from the login screen of the Instagram app through its help and password-reset options.

The official hacked-account page

Enter your username, email address, or phone number to identify your account, choose the option that describes your situation — typically “my account was hacked” — and follow the on-screen instructions.

If you still have access to the email or phone number on the account, this can take just a few minutes: you’ll receive a login link or a security code, tap it, and you’ll be guided to reset your password.

When the login link still reaches you

If the hacker hasn’t changed your contact details yet, the simplest path is through the app’s login screen. Use the “forgot password” or “get help logging in” option, enter your username, email, or phone number, and ask Instagram to send you a login link. Open it and follow the prompts to set a new password — the sooner the better.

What if the hacker changed your email and phone number?

Don’t panic — this is common, and Instagram has a process for it. The recovery flow offers deeper verification: Instagram may send recovery instructions to a different, secure contact address that you provide, bypassing the details the hacker changed.

You may also be asked to verify your identity with a video selfie — a short clip of your face turning in different directions, compared against the photos already on your account. This works best if your account has clear photos of you.

A few important notes:

– Submit one recovery request and be patient. Multiple requests from different devices won’t speed things up — they can look like automated abuse and slow things down.
– If you received an email from Instagram’s security address when your email was changed, look for a “revert this change” style link in it. Clicking it quickly can undo the hacker’s change immediately.
– Instagram has no public customer-service phone number for hacked accounts. Anyone claiming to be Instagram support over the phone is lying.

Recovering a Hacked Facebook Account

Facebook’s recovery starting point is facebook.com/hacked. Open it on a device or browser you’ve used for Facebook before — this helps Facebook recognize you. Enter your email address, phone number, or username to find your account, and the flow will walk you through securing it: reviewing recent changes, resetting your password, and checking your contact details.

If the hacker changed your password but your email or phone still works, you can also start from the login page’s “forgot password” option and have a reset code sent to you. Just confirm the code is going to an address or number you actually control.

No access to your old email or phone?

When the recovery flow shows contact options you no longer control, look for an option along the lines of “no longer have access to these.” Facebook will let you provide a new, secure email address and may ask you to verify your identity — sometimes with a government-issued ID. Reviews aren’t instant and commonly take a day or two, so submit one clean request and wait rather than filing duplicates.

You’re Back In — Now Lock the Door Behind You

Getting back into your account feels like a victory, but the job is only half done. A hacker who got in once can get in again unless you close every opening. Work through this checklist the moment you regain access.

**Change your password — everywhere it was reused.** Pick a long, unique password for Instagram and Facebook, and change it on any other site where you used the same one.

**Kick out every device.** Both apps have an active-sessions screen in settings showing where you’re logged in. Log out every session you don’t recognize — or simply log out all of them and log back in fresh on your own devices. This is the single most effective way to cut off the hacker’s access.

**Review what the hacker changed.** Check your email address, phone number, profile information, and bio. On Facebook, also glance at Page roles and connected apps — hackers sometimes grant themselves admin access or connect shady third-party apps. Remove anything you don’t recognize.

**Turn on two-factor authentication.** With it enabled, your password alone is no longer enough — a code from your phone or an authenticator app is required too. You’ll find it in the security settings of both Instagram and Facebook. An authenticator app is the strongest option, but even text-message codes are far better than nothing.

**Turn on login alerts.** Both platforms can notify you whenever someone logs in from an unfamiliar device, so you’ll know immediately if it ever happens again.

Watch Out for “Recovery” Scams

The moment you’re desperate to recover an account, scammers come out offering to help. Protect yourself with these rules:

– **Never pay anyone for account recovery.** Instagram and Facebook recovery is free. Anyone demanding payment — cash, gift cards, or crypto — is a scammer.
– **Don’t trust “support” accounts that message you.** Official support will never DM you asking for your password or a verification code.
– **Type recovery addresses yourself.** Only use the official hacked-account pages, reached by typing the address into your browser or through the app’s own help options — never via links in random emails, ads, or comments.
– **Never share verification codes.** Anyone asking you to forward a login code “to help verify you” is trying to break in, not help.

Keeping This From Happening Again

Most hacks aren’t sophisticated break-ins — they happen because of reused passwords, phishing links, or logins on shared devices. A few habits make you a much harder target:

– Use a unique password for every important account, especially your email
– Keep two-factor authentication on everywhere it’s offered
– Don’t tap login links in DMs, emails, or texts — open the app directly instead
– Don’t stay logged in on shared or public computers
– Keep your phone’s operating system and apps updated
– Review your connected apps and active sessions every few months

Frequently Asked Questions

**How long does it take to recover a hacked Instagram or Facebook account?**
If you still control your email or phone number, recovery can take minutes. If the hacker changed your contact details and identity verification is needed, expect anywhere from a few hours to a few days.

**The hacker changed my email and phone number. Is my account gone forever?**
No. Both platforms have verification paths for exactly this case — Instagram can use a video selfie matched to your photos, and Facebook can verify a government-issued ID. It takes longer, but recovery is very often still possible.

**Can I recover my account without any access to my old email or phone?**
Yes, through the identity verification options above. Having photos of yourself on the account (Instagram) or an ID document (Facebook) makes a real difference.

**Should I create a new account while I wait?**
Usually better to wait — creating a new account with the same name can complicate verification of your original one. Warn friends through other channels, like messaging apps or a post from a trusted friend’s account.

**My friend is getting scam messages “from me.” What should I tell them?**
Tell them plainly that your account was hacked, not to click any links or send money, and that you’ll confirm once you’ve recovered it.

The Bottom Line

A hacked account feels personal, but it’s a solvable problem. Secure your email first, use the official recovery pages rather than random links or paid “helpers,” verify your identity patiently if asked, then lock everything down with a fresh password and two-factor authentication. You’ll come out of this with accounts considerably harder to hack than before.