Warning signs, security checks, and immediate steps to take if you suspect unauthorised access to your Facebook account.
Warning Signs Your Facebook Is Compromised
- You receive an email from Facebook about a login from an unfamiliar device or location
- Your password no longer works or was changed without your knowledge
- Your email address or phone number on the account has been altered
- Friends report receiving spam messages or friend requests from your profile
- You see posts, comments, or likes on your timeline that you didn't make
- Unfamiliar apps have been granted access to your account
- Your account name, birthday, or profile photo has been changed
- Two-factor authentication has been disabled without your consent
How to Check for Unauthorised Access
1. Review Where You're Logged In
Go to Settings → Security and Login → Where You're Logged In. This shows every active session including device type, location, and time. Log out of any sessions you don't recognise by clicking the three dots and selecting Log Out.
2. Check Your Email for Facebook Alerts
Search your inbox for emails from security@facebookmail.com. Facebook sends notifications whenever your password, email, or phone number is changed. If you see changes you didn't make, act immediately.
3. Review Connected Apps
Go to Settings → Apps and Websites. Remove any apps you don't recognise or no longer use. Attackers sometimes install apps that maintain access even after you change your password.
4. Check Your Activity Log
Visit your Activity Log (accessible from your profile). Filter by posts, likes, comments, and friend requests. Look for any activity you didn't perform — this is a clear sign of compromise.
5. Review Page and Group Admin Roles
If you manage any Pages or Groups, check that no new admins or editors have been added. Hackers sometimes add themselves as admins to maintain control even after you recover your personal account.
Immediate Actions If You Suspect Compromise
- Change your password immediately — use a strong, unique password
- Enable two-factor authentication if it's not already on
- Log out of all sessions via Security and Login settings
- Remove any unfamiliar apps from Apps and Websites
- Check and restore your email address and phone number
- Alert your friends that your account may have been compromised
Important
If you can't log in at all, head straight to facebook.com/hacked to start the recovery process. See our guide: How to Recover Your Facebook Account After Being Hacked.
Was this guide helpful?
Know someone who needs this? Send them the guide.
JD
Written by
Jordan DicksonFounder, CyberSecurityGuides
Founder of CyberSecurityGuides, writing practical, jargon-free guides that help everyday people recover from and protect against online attacks.
Reviewed by CSG Security Engineers