How to Recover a Hacked Social Media Account

    Step-by-step guide to regaining control of any social media account that has been hacked or compromised.

    JDCS
    By Jordan Dickson · Reviewed by CSG Security Engineers

    Updated June 2026 · 4 min read

    A universal recovery guide that works for any social media platform — Facebook, Instagram, X, LinkedIn, TikTok, and more.
    Affiliate disclosure: if you sign up for a paid Proton plan through links on this page, CyberSecurityGuides may earn a commission at no extra cost to you. We only recommend tools we use and trust.
    If you've lost access to a social media account — or suspect someone else is using it — this guide will walk you through the universal recovery process that applies to virtually every major platform.

    Good to know

    ⏱ Act quickly. The sooner you begin the recovery process, the more likely you are to regain access. Most platforms prioritise recent compromise reports.

    Which platform are you on?

    These recovery steps work broadly, but each platform has its own recovery flow. Pick yours for exact instructions:

    Step 1: Visit the Platform's Recovery Page

    Every major social media platform has a dedicated account recovery page. Go directly to it — don't click links in emails or messages. Here are the official recovery pages for the most popular platforms:
    • Facebook: facebook.com/hacked
    • Instagram: instagram.com → "Get help signing in"
    • X / Twitter: twitter.com/account/begin_password_reset
    • LinkedIn: linkedin.com → "Forgot password?"
    • TikTok: Open the app → "Use phone / email / username" → "Need help?"
    • Snapchat: accounts.snapchat.com

    Tip

    For best results, use a device and browser where you were previously logged into the account. Platforms are more likely to recognise familiar devices.

    Step 2: Verify Your Identity

    Most platforms will ask you to verify your identity using one or more of these methods:

    Email or SMS Verification

    If you still have access to the email or phone number linked to your account, the platform will send a verification code. Enter it to confirm your identity.

    Trusted Contacts or Friends

    Some platforms (like Facebook) allow you to designate trusted contacts who can send you recovery codes. If you set this up previously, now is the time to use it.

    Photo ID Verification

    As a last resort, many platforms will accept a government-issued photo ID. This is reviewed manually and can take 1–5 business days. Make sure the name on your ID matches your account name.

    Tip

    💡 Tip: Check your email (including spam folders) for any recent messages from the platform about account changes — these often contain quick-recovery links.

    Step 3: If Standard Recovery Doesn't Work

    If the automated recovery process doesn't work, try these alternative approaches:
    • Try recovering from a different device or network you've used before
    • If you linked the account to another platform (e.g. Facebook linked to Instagram), try recovering through the linked account
    • Contact the platform's official support — most have a "hacked account" form
    • Check if you have active sessions on other devices that haven't been logged out yet
    • Look for an "I can't access this email or phone number" option in the recovery flow

    Important

    ⚠️ Never pay anyone claiming they can recover your account. This is a common scam targeting hacking victims. Only use official platform support channels.

    Step 4: Secure Your Account After Recovery

    Once you regain access, immediately take these steps to prevent it from happening again:
    1. Change your password to something strong and unique — at least 16 characters
    2. Enable two-factor authentication (2FA) using an authenticator app
    3. Review connected apps and revoke access to any you don't recognise
    4. Check your login activity and log out of all other sessions
    5. Update your recovery email and phone number
    6. Review recent posts and messages — delete anything the attacker posted

    Tip

    Consider switching your account email to a secure provider like Proton Mail to prevent future email-based attacks.

    Step 5: Alert Your Contacts

    If your account was compromised, the attacker may have sent messages to your contacts:
    • Post a notice on your recovered account explaining what happened
    • Privately message close contacts through another channel
    • Ask people to report any suspicious messages they received from your account
    • If the attacker created a fake account impersonating you, report it to the platform

    What's Next?

    • Read our guide on How to Tell If Your Social Media Has Been Compromised to learn the warning signs
    • Follow our How to Secure Your Social Media Accounts guide for comprehensive hardening
    • Consider setting up Proton Mail as your primary email to protect all your linked accounts

    Was this guide helpful?

    Know someone who needs this? Send them the guide.

    JD

    Written by

    Jordan Dickson

    Founder, CyberSecurityGuides

    Founder of CyberSecurityGuides, writing practical, jargon-free guides that help everyday people recover from and protect against online attacks.

    Reviewed by CSG Security Engineers

    More from Social Media Security