If you have ever opened your phone and noticed strange posts, new followers you never approved, or messages sent to people you have not spoken to in years, you already know the sinking feeling of a hacked social media account. Recovering a hacked account is not just about regaining access. It is about protecting your identity, restoring your reputation, and making sure the attacker cannot come back. After a decade of writing about digital security and helping readers manage their online presence, I have seen the same patterns repeat. The people who recover quickly act immediately, use the official recovery tools, and secure their email accounts first. This guide will walk you through the entire process, from the first moment you realize something is wrong to the long-term security habits that prevent a future takeover.
Social media accounts are valuable to criminals because they provide instant access to your friends, followers, and personal information. A hacked Facebook profile can be used to scam your relatives. A compromised Instagram account can be sold to a third party or used to promote cryptocurrency fraud. A hijacked LinkedIn profile can destroy professional credibility. In most cases, the hacker does not need advanced technical skills. They rely on leaked passwords, phishing links, and weak recovery settings. The good news is that every major platform has a recovery path. The bad news is that you need to move fast. The longer a hacker has access, the more accounts they can reach and the harder it becomes to undo the damage.
This article explains how to recover a hacked social media account on the most popular platforms, what to do when the attacker has changed your login details, and how to lock down your digital life after the incident. Whether you are dealing with Facebook, Instagram, X, TikTok, LinkedIn, or Snapchat, the same core principles apply: verify your identity, secure your email, use official recovery forms, and turn on stronger authentication. Follow the steps below in order and do not skip the security clean-up at the end. Even if you recover your account, leaving backdoors open will invite the same attack again.
Immediate Steps When You Suspect a Hack
The first hour after discovering a hack is the most important. Many people panic and start clicking random links or replying to the hacker, which only makes things worse. Instead, you should treat the situation like a fire drill. Stop, assess, and secure. Here is exactly what you need to do before attempting any platform-specific recovery.
1. Secure Your Email Account First
Your email inbox is the master key to almost every social media account. If a hacker controls your email, they can reset passwords, receive verification codes, and lock you out permanently. Before recovering your social media profile, log in to your email account and change its password to something long and unique. If your email provider offers two-factor authentication, turn it on immediately. Check your email settings for suspicious forwarding rules, recovery addresses, or filters that may be sending password reset messages to the attacker. Remove any devices or sessions you do not recognize. This step is critical because every recovery link you request later will be sent to your email. If the hacker still has access, you will be fighting a losing battle.
2. Check Your Account Activity
If you still have access to the compromised social media account, go to the security or account settings and review recent activity. Look for unrecognized logins, new devices, and changes to your profile information. Pay close attention to the email address and phone number on file. Hackers often change these details slowly to prepare for a full takeover. If you notice a recovery email or phone number you do not recognize, remove it immediately. If the account allows you to log out of all sessions, do that now. This will kick the hacker out temporarily, but it will not stop them from trying to log back in if they know your password.
3. Change the Password Immediately
If you can still log in, change your social media password right away. Use a password that is at least 12 to 16 characters long and includes a mix of upper and lowercase letters, numbers, and symbols. Do not reuse a password from another site. Once you change the password, the attacker should be locked out of the active session. However, some platforms keep old sessions alive for a short time, so also use the “log out of all devices” feature if available. After changing the password, enable two-factor authentication. This extra layer requires a code from your phone or an authentication app every time someone tries to log in from a new device.
4. Notify Your Contacts
If the hacker sent messages to your friends or followers, warn them not to click any links or send money. A quick public post or story saying “My account was hacked. Please ignore any unusual messages from me” can prevent further damage. You can also send direct messages to people who were most likely targeted. Be honest and concise. Your reputation will recover faster if you alert people early instead of waiting for them to fall for a scam.
How to Recover a Hacked Facebook Account
Facebook is one of the most commonly hacked platforms because it is used by billions of people and often contains a large network of friends and family. The recovery process works best if you have access to the email or phone number linked to your account. If you cannot log in at all, go to the Facebook login page and click “Forgot password?” Enter the email, phone number, or username associated with your account. Facebook will send a code to your recovery email or phone. If the hacker changed your contact details, click “No longer have access to these?” to start the identity verification process. Facebook may ask for a government-issued ID, a photo of your face, or answers to security questions. You can also visit the official Facebook account recovery page at facebook.com/hacked and follow the guided steps.
If you still have access but suspect unauthorized activity, go to Settings > Security and Login. Review the “Where You’re Logged In” section and log out all sessions you do not recognize. Change your password, update your recovery email, and enable two-factor authentication. Facebook also allows you to add trusted contacts who can help you regain access. Set this up after recovery. If the hacker changed your email and password, the identity verification path is your main option. Be patient and provide the requested documents. Facebook typically reviews ID submissions within a few days.
How to Recover a Hacked Instagram Account
Instagram recovery can be frustrating because the platform relies heavily on the original email or phone number. If you cannot log in, open the Instagram app or website and tap “Forgot password?” on the login screen. Enter your username, email, or phone number. If Instagram recognizes the account, it will send a login link to your recovery email or phone. If the hacker changed these details, tap “Need more help?” or “Try another way.” Instagram may ask you to verify your identity by entering the email address or phone number you used to sign up. In some cases, you will be asked to record a video selfie. Instagram uses facial recognition to match your face to the photos already on your account. This is often the fastest way to prove you own the account.
If you still have access, secure your account immediately. Go to Settings > Security and tap “Login activity.” Review the devices and locations. Tap the three dots next to any suspicious session and log it out. Change your password under “Password,” and then enable “Two-Factor Authentication.” Instagram also lets you add multiple recovery methods, so add both an email address and a phone number. If you notice the hacker changed your username, email, or bio, revert those changes as soon as possible. Keep a record of any suspicious emails or login alerts because Instagram support may ask for them.
How to Recover a Hacked X (Twitter) Account
X, formerly known as Twitter, has a relatively straightforward recovery flow. If you cannot log in, click “Forgot password?” on the login page. Enter your username, email, or phone number. X will send a reset code to your associated contact information. If the hacker changed your email or phone, click “Use another method” or visit the X Help Center. You may need to file a support request and provide information such as your username, the email address you used to sign up, and the approximate date you created the account. X support can be slow, so include as much detail as possible in your first message.
If you still have access, go to Settings and Privacy > Security and account access > Security. Here you can review active sessions, change your password, and enable two-factor authentication. X supports authentication apps, SMS codes, and security keys. Use an authentication app rather than SMS if possible because SIM swapping attacks are common. Also check Apps and sessions to revoke access from suspicious third-party applications. Hackers sometimes connect unauthorized apps that keep them in control even after you change your password.
How to Recover a Hacked TikTok Account
TikTok accounts are often targeted for their follower count and potential to promote scams. If you cannot log in, tap “Forgot password?” on the login screen. You can reset via phone or email. If both options fail, tap “Need help?” or go to TikTok’s feedback form. TikTok support will ask for your username, the email or phone number originally linked to the account, and details about when you lost access. In many cases, TikTok can restore access if you provide enough information. If you are still logged in on one device, use that opportunity to secure the account before the hacker kicks you out.
To recover a hacked TikTok account that you can still access, go to Settings and privacy > Security and select “Manage devices.” Remove any devices you do not recognize. Change your password and enable “2-step verification.” TikTok also allows you to add a recovery email and phone number. Make sure both are current. If the hacker posted inappropriate content, delete those videos and update your bio. If your account was banned for content the hacker posted, use TikTok’s appeal system and explain that your account was compromised. Include screenshots if possible.
How to Recover a Hacked LinkedIn Account
A hacked LinkedIn account can harm your professional reputation and lead to phishing attacks against your colleagues. If you cannot log in, click “Forgot password?” on the LinkedIn sign-in page. Enter the email associated with your account. LinkedIn will send a reset link. If the hacker changed your email, go to the LinkedIn Help Center and select “Account Access” then “I can’t sign in.” LinkedIn may ask you to verify your identity by providing an official ID. You can also contact LinkedIn support directly through the help form. Be ready to share your previous profile information, connection names, or the email address you used when you created the account.
If you can still log in, change your password immediately from Settings & Privacy > Sign in & security. Review the “Where you’re signed in” section and sign out of all sessions. Enable two-step verification. LinkedIn also lets you review active sessions and revoke access from third-party apps. Check your profile for changes to your headline, work history, or contact information. Hackers sometimes add a new email or link to a fraudulent website. Remove those changes and update your summary if necessary.
How to Recover a Hacked Snapchat Account
Snapchat is particularly vulnerable to phishing attacks because users often share login credentials with third-party apps. If you cannot log in, tap “Forgot your password?” and choose to reset via email or phone. If the hacker changed your contact information, go to Snapchat’s support page and select “I think my account was hacked.” Snapchat support will ask for your username, the email and phone number linked to the account, and details about when you lost access. You may also need to verify your identity through your phone number. Snapchat does not allow multiple active sessions, so if you can still access the app on one device, the hacker may already be locked out.
If you still have access, secure the account by going to Settings > Two-Factor Authentication and enabling it. Change your password under Password. Review your linked email and phone number. Snapchat also allows you to view active sessions and log out of suspicious devices. Be cautious about third-party apps and unofficial Snapchat clients. These are a leading cause of account takeovers because they require your login details and can steal your credentials.
What to Do When the Hacker Changed Your Email and Phone Number
One of the most common struggles in account recovery is finding that the hacker replaced your email and phone number with their own. This makes the standard password reset process useless because all recovery codes go to the attacker. In this situation, you must use the platform’s account recovery or identity verification process. Every major platform has a flow for people who no longer have access to the original email or phone. Look for options like “Try another way,” “No longer have access to these?” or “Need more help?” on the login screen.
When you reach the identity verification step, follow the instructions carefully. Some platforms ask you to upload a government-issued ID. Others ask for a video selfie or a photo of your face. Provide clear images and make sure the details match your account information. If you are asked questions about your account, answer as accurately as possible. Details like the date you created the account, previous passwords, and names of your first followers can help prove ownership. Do not create a new account and pretend it is the old one. That can delay recovery and may violate platform policies.
If the platform does not offer a direct recovery form, contact their support team through the official help center. Include a concise but complete summary: your username, the original email and phone number, the approximate date of the hack, and any evidence you have. Screenshots of suspicious login alerts, messages from the hacker, or password reset emails can strengthen your case. Remember that support teams handle thousands of requests. A clear, organized message increases your chances of a fast response.
Steps to Take After Regaining Access
Recovering your account is only half the battle. Once you are back in, you need to clean up the mess and harden your security. Start by changing your password again from a trusted device. Even if you already changed it during recovery, doing it again ensures that no residual sessions remain. Then enable two-factor authentication on every platform. Use an authentication app like Google Authenticator, Authy, or Microsoft Authenticator instead of SMS when possible. SMS codes can be intercepted through SIM swapping, while authentication apps are tied to your physical device.
Next, review every setting in your account. Check your profile photo, bio, website links, and linked accounts. Hackers often leave behind malicious links or changed profile details. Look at your authorized apps and revoke anything you do not recognize. Check your followers and following lists for suspicious additions. If the hacker blocked people or unfollowed accounts, restore those connections manually. If the hacker sent direct messages, review them and notify affected contacts. Delete any posts, stories, or tweets the hacker created, and report the incident through the platform’s security tool if available.
Check Your Linked Email and Phone Number
After a hack, the attacker may still have access to your recovery email or phone number. Log in to your email account and change its password again. Check for forwarding rules, filters, and recovery addresses that could let the hacker back in. Review your phone account for SIM swapping indicators, such as a sudden loss of service or unusual text messages. Contact your mobile carrier if you suspect your SIM was cloned or transferred. A hacker who controls your phone number can bypass many two-factor authentication systems.
Scan Your Devices for Malware
Sometimes a social media hack is a symptom of a larger problem. If you clicked a phishing link or downloaded a suspicious attachment, your device may be infected with malware. Run a full scan using a reputable antivirus or anti-malware tool. Remove any suspicious apps, browser extensions, or files. Update your operating system and apps to the latest versions. If you reuse passwords across multiple sites, a data breach on one platform could expose your social media accounts. Use a password manager to create and store unique passwords for every login.
Common Mistakes That Delay Account Recovery
Many people make the recovery process harder by acting out of panic. One common mistake is creating a new account with the same name and messaging the hacked account. This alerts the hacker and gives them time to delete evidence or lock you out further. Another mistake is paying someone online who claims they can recover your account. These are almost always scams. Legitimate account recovery is handled only by the platform itself, and no third party can access their internal systems. Avoid sharing personal information with random “recovery experts” on social media. They will often take your money and disappear.
Another frequent error is ignoring the original email account. If the hacker still controls your email, any recovery code you receive can be intercepted. Always secure the email first. Some users also fail to document the hack. Screenshots of suspicious activity, login alerts, and messages from the compromised account can be valuable when dealing with support teams. Finally, do not reuse the same password after recovery. Changing your password to a variation of the old one, such as adding a “1” at the end, does not protect you. Use a completely new, unique password generated by a password manager.
How to Prevent Future Social Media Hacks
The best recovery is prevention. After regaining access to your account, take time to build a stronger security foundation. Start with a password manager. It will create long, random passwords for every account and store them securely. You only need to remember one master password. Next, enable two-factor authentication on every social media platform you use. Use an authentication app rather than SMS when possible. Many platforms also support physical security keys, which are even harder to bypass. Add a recovery email and phone number to each account, and make sure they are secure and current.
Be skeptical of links sent through direct messages, even from friends. A common hacking technique is to send a message that says something like “Look at this video of you” followed by a link. If you click the link and enter your login details, the hacker captures them immediately. Always verify unexpected messages before clicking. If you receive a password reset email or login alert that you did not request, ignore it and consider changing your password. Never enter your social media credentials on a third-party website, especially one that promises followers, likes, or verification. These are phishing pages designed to steal your account.
Review your security settings regularly. Most platforms have a section for active sessions or logged-in devices. Check it monthly and log out anything unfamiliar. Monitor your connected apps and revoke access to services you no longer use. Keep your email account as secure as your bank account because it is the gateway to everything else. Finally, stay informed about common scams. Hackers change tactics constantly, but their goal remains the same: tricking you into giving up your credentials. Awareness is one of the strongest defenses you have.
When to Report the Hack to Authorities
In some cases, a hacked social media account can lead to financial loss, identity theft, or harassment. If the hacker used your account to defraud others, send threatening messages, or access financial information, consider filing a report with your local police and relevant cybercrime authorities. In the United States, you can report cybercrime to the Internet Crime Complaint Center at ic3.gov. If you believe your identity was stolen, contact the Federal Trade Commission at identitytheft.gov. For users in other countries, check your national cybercrime reporting portal. Financial institutions and credit bureaus should also be notified if banking information was exposed.
If the hack involved a business account or led to a data breach affecting others, you may need to inform affected parties and consult a legal professional. Document everything: dates, times, suspicious IP addresses, messages, and platform responses. This evidence can help law enforcement investigate and may be required by insurance companies or employers. Most individuals will not need to go this far, but knowing the option exists is important. A serious hack is not just an inconvenience; it can have real legal and financial consequences.
Conclusion
Recovering a hacked social media account is stressful, but it is not impossible. The key is to act quickly, secure your email first, and follow the official recovery process for your platform. Whether you use Facebook, Instagram, X, TikTok, LinkedIn, or Snapchat, the path back starts with proving your identity and locking out the attacker. Once you regain access, do not stop there. Change your passwords, enable two-factor authentication, review your account settings, and clean up any damage the hacker left behind. Your online presence is an extension of your identity, and protecting it requires ongoing attention.
Remember that you are not alone. Millions of people face account takeovers every year, and the platforms have built recovery systems for exactly this reason. Use them, but be patient. Some processes take a few days, especially when identity verification is required. Stay calm, keep records, and follow the steps in this guide. With the right approach, you can recover your hacked social media account and make it more secure than ever before. The goal is not just to get back in but to stay in control for good.
