How to Recover a Hacked Facebook Account

Everyone · How-to · Updated October 1, 2026 · LearnLife Editorial

What do you need before starting to recover your hacked Facebook account?

Gathering the right information and tools before starting your Facebook account recovery is crucial. First, ensure you have access to the email address or phone number linked to your Facebook account. This is important because Facebook will send recovery codes or links to these contacts. For example, if your Facebook login is tied to your email, make sure you can open that email account to receive any security messages.

If you cannot access your primary email or phone number, try to remember if you linked any backup emails or phone numbers to the account. Having these alternatives ready can open more recovery options.

Use a device you frequently use for Facebook, like your personal smartphone or computer. Facebook recognizes familiar devices and locations, which helps confirm your identity. Avoid using public or shared computers during recovery, as they may not be secure.

Also, prepare any details that can help identify your account: your Facebook username (the one in your profile URL), your full name as shown on the account, and any recent passwords you remember. These details support Facebook’s verification process.

Finally, have a government-issued photo ID ready, such as a driver’s license or passport. Facebook might request this to confirm your identity if automated recovery options don’t work. Preparing a clear photo or scan of your ID will speed up this step.

By collecting all these items before starting, you reduce delays and improve your chances of successful recovery.

What are the step-by-step instructions to recover a hacked Facebook account?

Follow these exact steps to recover your hacked Facebook account:

1. Go to facebook.com/hacked: This is Facebook’s dedicated page for compromised accounts. Starting here ensures you use the correct recovery tools.
2. Click “My Account Is Compromised”: Enter your email address, phone number, username, or full name to help Facebook find your account. For instance, typing your username helps locate your profile even if your email was changed by the hacker.
3. Select a recovery method: Facebook will offer options such as sending a code to your email or phone. Choose the contact method you can currently access.
4. Enter the security code: Once you receive the code, carefully type it into Facebook’s form. This proves you control that contact point.
5. Reset your password: Choose a new password that is strong and unique. For example, combine words, numbers, and symbols like “CoffeeMug#27Drive.” Avoid easily guessable passwords like birthdays or simple words.
6. Review recent activity: Facebook will show recent login locations and devices. Look for any unfamiliar activity, such as logins from a city you haven’t visited or devices you don’t own. Identifying these confirms unauthorized access.
7. Secure your account: Follow Facebook’s prompts to enable security features. Turn on two-factor authentication (2FA), which requires a code sent to your phone or authenticator app every time you log in. Remove any unknown devices or connected apps that you don’t recognize.
8. Update your contact information: Make sure your email and phone number are correct. Add trusted contacts if you haven’t already; these friends can help you regain access if locked out again.

Each step helps Facebook confirm your identity and strengthens your account against future attacks.

How can you tell if your account recovery worked?

After completing the steps, confirm your account is fully recovered by checking these signs:

• Successful login: You can log into Facebook with your new password without problems. If you encounter errors or cannot access your account, recovery may not be complete.
• Security alerts: Facebook should send you emails or notifications confirming password changes or security updates. These messages indicate Facebook recognized your recovery actions.
• Review login history: Navigate to Settings > Security and Login > Where You’re Logged In. Verify all devices and locations listed are familiar. If you see unknown devices, your account may still be compromised.
• Check recent posts and messages: Look through your timeline and messages to remove any content or communications you didn’t create.
• Verify two-factor authentication is active: This extra security layer helps protect your account moving forward.

If all these checks are positive, your account is likely secure and recovered.

What should you do if the Facebook recovery process goes wrong?

If you cannot recover your account using the standard steps, try these solutions:

• Try different recovery options: If you don’t receive a code via email, attempt phone number recovery or vice versa. Sometimes hackers only remove one recovery option.
• Use trusted contacts: If you set up trusted contacts, ask them to help. Facebook sends them security codes that they can share with you to regain access.
• Submit a government ID: Visit Facebook’s Help Center and use the identity verification form to upload a clear photo of your ID. Make sure the name matches your Facebook account.
• Check your email spam folder: Security emails may land in spam or junk folders, so look there for Facebook messages.
• Contact Facebook Help Community: While direct support contact is limited, Facebook’s online help forums can provide guidance.
• Report identity theft: If your account is used to impersonate you or commit fraud, report the incident to the FTC at IdentityTheft.gov or to law enforcement.
• Avoid third-party recovery services: These are often scams. Only use official Facebook recovery tools.

Persistence is key. Continue trying recovery methods and checking your email for updates from Facebook.

How can you adapt these recovery steps for different audiences?

Recovery steps can be made easier depending on who is using them:

• For older adults: Use simple, clear language and walk through each step slowly. Offer to help collect recovery information and explain technical terms. For example, say, “Two-factor authentication is like a second password sent to your phone to keep your account safer.”
• For teens: Stress the importance of not sharing passwords and telling a trusted adult if their account is hacked. Use examples, such as, “If someone posts messages you didn’t write, that’s a sign your account was hacked.”
• For parents: Help them understand how to assist children or teens with recovery, including setting up trusted contacts and monitoring activity.
• For people with disabilities: Use accessibility tools like screen readers and ensure instructions are compatible with those tools. Facebook offers accessibility settings to navigate recovery steps.

Adjusting how you explain recovery reduces stress and improves success for all users.

What are additional security tips after recovery?

Once recovered, protect your account with these security habits:

• Use unique, strong passwords: Consider a password manager to create and store complex passwords.
• Enable two-factor authentication: Use authenticator apps or SMS codes for a second verification step.
• Review app permissions: Remove any suspicious or unused apps connected to your Facebook account.
• Be cautious of phishing: Don’t click on suspicious links or provide your password in response to unsolicited emails. Facebook never asks for passwords by email.
• Turn on login alerts: Enable notifications for unrecognized logins to get immediate warnings.
• Always log out on shared devices: Never stay logged in on public or shared computers.

These steps help prevent future hacking attempts.

How can you prevent Facebook account hacking in the future?

Prevention is ongoing. Follow these tips to keep your Facebook account safe:

• Regularly update your password: Change your password periodically, especially if you suspect suspicious activity.
• Avoid suspicious links: Don’t open emails or messages from unknown senders asking for login information.
• Limit third-party app connections: Only authorize trusted apps and remove unnecessary ones.
• Educate yourself and family: Learn how phishing and social engineering work to recognize scams.
• Adjust privacy settings: Limit who can see your posts and personal info, reducing exposure to hackers.
• Keep devices updated: Regular software and antivirus updates patch security holes hackers exploit.

Staying vigilant and practicing these habits greatly reduces hacking risks.

Frequently asked questions

Can I recover my Facebook account if I no longer have access to my email or phone?

Yes, but it may take extra steps. Facebook might ask you to submit a government-issued ID or use trusted contacts to verify your identity. Visit Facebook’s Help Center for detailed instructions on alternative recovery methods.

How long does it usually take to recover a hacked Facebook account?

If you can use your linked email or phone, recovery can be quick, often within minutes. However, if Facebook requires additional identity verification, the process can take several days. Checking your email regularly helps you stay updated.

What if the hacker changed my Facebook email and phone number?

Use the “My Account Is Compromised” tool on facebook.com/hacked. You’ll likely need to verify your identity with a government ID. Acting quickly improves your chances of regaining control.

What should I do if I suspect hacking but cannot log in?

Report your account as hacked using facebook.com/hacked. Change passwords on your linked email accounts immediately. Follow Facebook’s recovery steps to regain access and secure your account.

Should I report a hacked Facebook account to the police?

If your account is used for identity theft, fraud, or harassment, consider reporting it to the FTC via IdentityTheft.gov or local law enforcement. For general recovery, start with Facebook’s tools before involving authorities.