facebook report compromised login 1password

What to do if your Facebook account Is hacked

Follow these steps to regain access to your Facebook account after being hacked

“Why would someone want to hack my Facebook account?” may be the first thing that comes to mind for those who aren’t celebrities but have had their Facebook account taken over by cybercriminals .

However, having your Facebook account hacked is actually not that uncommon. There are many reasons why someone might want to gain access to your Facebook account. While stealing your personal information like your passwords and other credentials is one major motivation, forcing your Facebook account to share spam with your friends online is another.

Whatever the reason may be, hacked social media accounts have become a part of life. This is why it’s important to know the steps you can take to recover your Facebook account once you’ve discovered it’s been hacked.

This is a step-by-step guide on recovering a hacked Facebook account along with next steps you should take to ensure it doesn’t happen again with input from several cybersecurity experts. (And don't miss our guides to how to make yourself anonymous on Facebook , how to block and unfriend someone on Facebook , and how to protect your identity, personal data and property .)

1. Check to make sure your account really has been hacked

If you notice suspicious activity on your Facebook account including changes to your name, birthday, email address or password, new sent messages or friend requests to people you don’t know or posts appearing on your timeline you didn’t post – then go to the upper right-hand corner of your Facebook page and click on the arrow there which will reveal a drop-down menu.

Click Settings and Privacy > Settings and a new menu will pop up. Choose the Security and Login option and then Where You’re Logged In . If there is a login from a device or place you don’t recognize, then your account may have been hacked. 

2. End the intruder's session

Click the three vertical dots next to the device login that you don't recognize, then Not You? or Log Out. This logs the intruder out of your account, at least temporarily. This limits the damage the intruder can do and allows you to continue regaining and securing control of your account.

3. Alert your contacts

If your account has been compromised, it likely has already been used to contact people from your friends list. You'll need to tell them not to trust any links or install any apps that you had sent them — via wall postings, Facebook messages or Facebook email — while the intruder had control of your account.

4. Change your Facebook password

If the intruder has not changed your password, then changing it is easy. Click Security and Login again, then scroll down to Login and then click Change Password.

"If you use the same password for multiple sites, it is best to change your passwords there as well," said Cosette Jarrett, a web-marketing specialist based in Salt Lake City. "If your password has been compromised on one site, chances are your accounts at other sites are in danger, too." 

This is why password reuse is such a big problem. Fortunately, you can nip it in the bud for good by using one of the best password managers to generate strong, complex and unique passwords for each of your online accounts. You can also follow these tips to create a secure password .

5. Reset your password if the intruder has changed it

Often, hackers will change your password once they have gotten control of your account, so it's not as simple as just going into your account settings and changing your password.

You'll have to reset your password by clicking the Forgot Your Password link underneath the Facebook login. You will need to provide information to identify yourself, such as the email address you used to register with Facebook, the phone number associated with your account, your Facebook username, or your name and the name of one of your Facebook friends. 

The last option may be best if you believe the person who hacked your account has changed any of your profile information.

6. Report your compromised account

If ads or spam are being sent from your hacked account, you must report it as compromised, which you can do at this link . After reporting, you will receive further instructions from Facebook to resolve the issue.

7. Check for malicious apps

Once you have control of your account again, go to the same Settings menu where you checked for suspicious logins or changed your password, and click on the Apps option in the left-hand menu. Go through the list and check for any apps you did not add yourself, and click the X next to them to remove them. It's worth noting that if you don't use an app for some time, it will expire automatically.

8. Secure your Facebook account

Getting your Facebook account hijacked is not the end of the world. Having it happen to you, though, can be a good reminder to make sure your account is as secure as it can be.

Facebook itself offers a number of security tips . You should use a unique password for Facebook, one that you do not use on any other sites; you should log out of Facebook when using a computer you share with other people; you should run the best antivirus software on your computer (or the best Mac antivirus software if your using an Apple computer); and you should be careful about the links you click on and the apps and files you download. You can also run a Security Checkup while logged in to your Facebook account.

Even if you have not been hacked, shoring up your Facebook security is a good idea. Since many Facebook account compromises are caused by external apps, consider limiting the number of apps you use in general, both on your computer and your smartphone.

Do not click on suspicious links or ads shared in your news feed, even when you trust the people who are doing the sharing — it's possible they themselves have been hacked. Always make sure your desktop web browsers and mobile operating systems are up to date. And be sure to sign out when you're done using Facebook for the day.

The same goes for other social networks. Twitter, Instagram, LinkedIn and others have all had user accounts compromised in various ways. As always, remain vigilant and be smart about what you do online, and you'll be just fine.

Sign up to get the BEST of Tom's Guide direct to your inbox.

Here at Tom’s Guide our expert editors are committed to bringing you the best news, reviews and guides to help you stay informed and ahead of the curve!

Anthony Spadafora is the security and networking editor at Tom’s Guide where he covers everything from data breaches and ransomware gangs to password managers and the best way to cover your whole home or business with Wi-Fi. Before joining the team, he wrote for ITProPortal while living in Korea and later for TechRadar Pro after moving back to the US. Based in Houston, Texas, when he’s not writing Anthony can be found tinkering with PCs and game consoles, managing cables and upgrading his smart home. 

• Sarah Brown

How to access archived web pages in Google

TikTok sued by DOJ over collecting data on millions of American children

Bose takes on AirPods 4 with new QuietComfort buds — $179 with ANC and VoiceID

Most Popular

• 2 My favorite Sony headphones just revealed in a stunning new pink shade as part of Le Sserafim collaboration — get them before they sell out
• 3 Netflix top 10 movies — here's the 3 worth watching now
• 4 Huge Walmart sale is here to fight Prime Day — 17 deals I'd shop now on TVs, headphones and more
• 5 Hulu top 10 shows — here's the 3 worth watching right now

How to recover when your Facebook account is hacked

There’s only so much you can do.

By David Strom

Share this story

If you buy something from a Verge link, Vox Media may earn a commission. See our ethics statement.

Hopefully, the day will never come when you find your Facebook account has been hacked or taken over. It is an awful feeling, and I feel for you, for the world of hurt that you will experience in time and perhaps money to return your account to your rightful control. 

Let me take you through the recovery process. Afterward, I’ll provide some proactive security pointers you can follow to prevent this awful moment from happening, or at least reduce the chances that it will.

Three ways you can lose control of your Facebook account

There are actually three different possible scenarios.

Scenario 1. You let a family member or friend “borrow” your Facebook account on your computer or phone. They proceed to consume content, post messages as you, or befriend random people. This happened to a friend of mine, who had a grandchild staying at her home for a week. The girl left town and left a mess behind on my friend’s Facebook account. “She didn’t post anything to my account, but I had odd friend requests that I had to clean up. I decided to just quit using my account.” This is more of a nuisance than a hack, but still annoying.

Remedy : First, use Facebook’s security page to check and see where else your account is already logged in.

This list should also remind you of all of the devices that you have used Facebook on in the past. I took this screenshot after I found (and then removed) an older Windows laptop that I hadn’t used in years on the list. You’ll also see an entry for my iPhone that is located somewhere in Indiana. I haven’t visited that state in years, so sometimes the geo-location algorithms are a bit wonky. Even if your account isn’t hacked, it is helpful to routinely check this screen to make sure you haven’t enabled a login by mistake.

If you don’t recognize (or don’t use) any of the devices on this list, click on the three vertical dots on the right and force those machines to log out of your account. Next, change your password to something unique. Also, remember in the future to sign out of Facebook (and Messenger) before you loan your device to anyone.

Scenario 2. Someone uses your photo and name and sets up a new account. Then they proceed to try to recruit your FB friends to their account.

Remedy : There isn’t much you can do about it, other than tell people you are still you and to ignore the imposter. This should be a warning when you receive a friend request from someone you think you have already befriended, or someone you haven’t communicated with in years. A word to the wise: send them an email or text asking if the request is genuine.

Scenario 3. The doomsday scenario . Someone guesses your account password and proceeds to lock you out of your account. This situation is the most dire, and fixing this will depend on what else you have linked to your Facebook account and how determined you are to get it back.

This happened to Elizabeth, a book author. She ended up working with two different friends who were IT professionals and a lawyer over the course of four months. She had two complicating factors that made recovering her account difficult. 

First, she used Facebook ads to promote her books, so she had connected her login to her credit cards. This resulted in the hacker charging her card with their own ads to try to lure other victims to compromise themselves. 

The second complication was that she was using her pen name and a random birthday date for her account. During the recovery process, Facebook asks that you scan your ID to verify who you are. When she told me this, I became concerned for myself. For years I prided myself on using January 1 as my Facebook “birthday.” Now she was telling me that I was setting myself up for trouble if someone hacked my account.

She eventually got her password reset, but almost immediately the hacker reset and took over her account again. “I tried to get someone at Facebook to help me, but I couldn’t get anyone on the phone,” she told me. Before the pandemic, the company had a special phone hotline for industry insiders, “but this was discontinued,” she said. She had more success blocking the credit card charges by phoning her bank. “I was trying to be a step ahead of the hacker, and losing sleep. My whole life was put on hold as I tried to deal with the situation. I got no work done for months. I ended up changing my passwords on more than 30 different accounts.”

Possible remedies: if you find yourself in this last situation, you have three basic choices:

1. Now would be a good time to leave Facebook . The trouble is, you have someone who is pretending to be you, and could leverage your identity into criminal and uncomfortable situations. Not to mention that they could try to leverage bank accounts that are linked to your account or open up credit cards in your name. (More on that in a moment.)

2. Try to reinstate your account on your own , using Facebook’s own obscure and oftentimes contradictory steps . That is the way most people I know have tried. However, you will find out very quickly that there is no easy way to do this. You have to communicate with Facebook support through someone else’s account, which seems somewhat contradictory, so hopefully your spouse or friend is willing to lend a hand. (Don’t be tempted to set up a second account, because that could result in both of your accounts eventually being canceled.) Then you have to choose one of several options (finding an unauthorized post, an account that uses your own name and/or photos) and enter the rabbit hole to recover your account. 

If you use Facebook as a means to log into other internet services, you will have to disconnect these links — otherwise a hacker can then compromise these other accounts. If, like Elizabeth, you have connected your credit card or other financial accounts, you will have to contact these institutions and get these charges rescinded. Start by trying to use Facebook from other devices you have previously used: perhaps the hacker hasn’t automatically logged you out.

3. Use a third-party recovery service , such as Hacked.com . This will cost you $249, but the company will be persistent and if they can’t help you, they will refund your fee. You also get a year’s digital protection plan included that normally sells separately for $99. If you have a complex situation like Elizabeth (connected finances, non-matching birthday), I recommend using this path. 

But make sure you aren’t employing some random hacker who might be taking your money and doing nothing else. I spoke to Hacked.com founder Jonas Borchgrevink, who outlined the various sequences of steps that his staffers try in a recent Washington Post article . And he confirmed that if you are using a different name from what is shown on your ID, it is almost impossible to recover your account.

Proactive security measures

If you haven’t been hacked (yet) and are getting somewhat uncomfortable reading this, here are some steps to take to secure your Facebook account, or to at least reduce your pain points if it does happen. Start by doing at least one of them today, and make sure you take care of all of the items as soon as possible.

1. Set up additional login security on your Facebook account. Facebook offers you a set of confusing choices, but the one that I recommend is to use a two-factor authenticator app such as Google Authenticator. (You can start at this Facebook page .)

Two-factor authentication (also known as 2FA) uses an Android or iOS smartphone app as part of the login process. After you supply your username and password, Facebook asks you to type in a series of six numbers that are generated by the app. These numbers change every minute, so you need your phone nearby when you log in. If you want extra credit, take the time to enable this second factor method on your other accounts, including any banks and credit card companies that support this method (sadly, too few do).

Elizabeth was using a less secure method for her second factor: sending the six numbers as a text message to her phone. You can read more about why this isn’t my preference .

2. Check to see if you have any payment methods configured on Facebook. While preparing for this article, I was surprised to find my PayPal address linked to my Facebook account — and I thought I was being careful about my Facebook security. There are two places to check. First, there is the page that shows if you have set up any credit cards to make direct payments to individuals or causes, called Facebook Pay. Go to this other link to remove any ad payment methods . If you are running any ad campaigns on your business, you will have to stop them first. 

3. Remove connected apps and websites. If you have signed on to third-party apps using your Facebook credentials, now is the time to review and remove them (you can find the appropriate page here ). The same is true with removing any business integrations . You take a small hit in not being able to automatically log into these other services, but you also protect yourself if your account has been compromised.

If you have a Facebook business page, you should have at least two people who have admin rights to this page. (Go to Page Settings > Page Roles.) If your business account is hacked and you are the sole admin, it will be next to impossible to get it recovered. This contact should also have second factor authentication turned on.

4. Check your account’s email contacts ( using this Facebook page ). You should have at least a second contact email (or more) that Facebook can use to send you notifications in case your main email address becomes compromised. Of course, use different passwords with these different email accounts.

I know, this seems like a lot of work, and there are a lot of places in the Facebook settings pages that you will have to visit and pay attention to. And chances are, the links provided above might not work in the future, as Facebook likes to make changes to its settings. 

If these activities to make yourself more secure haven’t gotten you frustrated, you might want to continue improving your security. I recommend either the Jumbo smartphone app for iOS and Android, or Avast One (available on Windows, Mac, iOS, and Android). Either can help walk you through the numerous steps to secure your Google, Twitter, and other accounts.

Parting words of wisdom

Think before you click. If you get a message from what looks like a social media company saying that your account has been compromised, don’t follow any links or call any phone numbers in the message. This could be a lure from a hacker. Instead, navigate to the site or use its own app directly.

Be aware of things that seem unusual . Keep an eye out for messages you didn’t send, posts you didn’t create, or purchases you didn’t make. These could be tells that someone has guessed your password or compromised your account. If you are lucky, it might be an errant teen using one of your computers.

As Elizabeth told me, “Being hacked is like getting a digital tattoo — everyone can see the after-effects of your poor choices.”  

Nintendo and Pokémon are suing Palworld maker Pocketpair

Apple iphone 16 pro review: small camera update, big difference, playstation’s 30th anniversary ps5 and ps5 pro are delightfully retro, microsoft launches a windows app for iphones, macs, and android devices, gta v, one of the most popular steam deck games, is now ‘unsupported’.

More from Tech

The Nintendo Switch 2 will now reportedly arrive in 2025 instead of 2024

The best Presidents Day deals you can already get

Interview: Figma’s CEO on life after the company’s failed sale to Adobe

Vudu’s name is changing to ‘Fandango at Home’

• Save BIG on Big Deal Days!
• Apple Fans: Grab Early Prime Day Deals!

Hacked Facebook Account: Immediate Recovery Steps

Regain control of your Facebook account

• Auburn University

How Was My Account Hacked?

• Step-by-Step: Report the Hack

Alert Your Friends

• Step-by-Step: Delete Unknown Apps
• Extra: Enable Two-Factor Authentication
• Extra: Run Security Checkup
• Extra: Change Your Facebook Password Regularly

Facebook and its more than 2 billion active users are an attractive target for hackers. Some of the more successful hacks appear in the news, but many hacks are smaller and affect only some Facebook users.

Indicators that someone may have hacked your Facebook account are:

• Your email or password has changed.
• Your name or birthday has changed.
• Fake friend requests have been sent from your account to people you don't know.
• Friend requests have been sent to people who are already your friends.
• Posts that you didn't create appear to be from you.
• Friends receive messages from you that you didn't write.

If any of these telltale signs happen to you or you notice any other unusual activity, take fast action to protect your account.

When you think your Facebook account may have been hacked, change your password before you do anything else. If you no longer have access to your Facebook account, immediately follow the steps described below.

These directions work for any Facebook account. The steps described below require access to the desktop version of Facebook.com.

Hackers may have gained access to your Facebook account in any number of ways.

They could have guessed your password, or they may have set up an Evil Twin Wi-Fi hotspot at a coffee shop and stolen your credentials through a man-in-the-middle attack. Maybe you left your account logged in at a computer lab at your school or library, or hackers could be using your account from a stolen tablet or phone.

Regardless of how they managed to obtain your Facebook credentials, the best thing to do is move quickly to limit the amount of damage and try to prevent any further hacks.

Report a Compromise to Facebook

If you can't recover your Facebook password and access your account, you can still report a possible hack to the company and receive help to reset your password:

Open Facebook's Report Compromised Account page.

Click My Account Is Compromised .

Enter the phone number or email address associated with your account, and then click Search .

Type your current password or an old one, and then click Continue .

Select one of the options from the list that indicate why you think your account has been hacked, and then click Continue .

Facebook explains that you need to change your password and confirm that recent changes to your account came from you to keep your account secure.

Click Get Started .

Follow the instructions provided to secure your account and change your password.

Tell your Facebook friends that your account was hacked. Warn them not to click any links that may have come from your account during the time it was hacked and out of your control.

Hackers who compromised your account may have posted on your friends' pages or sent links in comments or private messages.

Delete Unknown Apps From Your Account

Eliminate any Facebook apps installed on your account that you don't recognize. While you're at it, delete apps you no longer use. At some point, you may have granted the apps access to some of your personal information.

Open the Facebook menu by clicking the arrow in the top right corner.

Click Settings .

Click Apps and Websites from the left pane.

Check the box next to the Facebook apps you want to remove, and then click Remove .

Click Remove again on the confirmation prompt. You also have the opportunity to delete every post, photo, and video that the apps posted on your behalf.

If you click View and edit on an app, it shows the level of access it has to your account and the information Facebook shares with it.

Also on the Apps and Website page are additional tabs at the top where you can find expired apps (apps that had access at one time, but their permissions have since lapsed) and past apps (which have been removed from your account).

Removed or expired apps still have the information shared with them while the apps were active, but they can no longer access that information from your Facebook account after they expire or are removed.

Clicking the tile for a removed or expired app tells you the best method to request that the app delete your information.

Prevention: Enable Two-Factor Authentication

Don't wait for the next hack to take steps to improve your Facebook security and privacy. To prevent your account from being compromised again, Facebook strongly recommends using two-factor authentication .

Activating this feature requires an additional form of authentication beyond your password when anyone attempts to log in to your account. The second form of authentication can be a number code texted to your phone or a code generated by a separate authentication app on your phone, or a smart key inserted into your computer's USB drive.

When you have two-factor authorization in place, someone could have full access to your password, but unless they also have your second means of authentication (like your phone or a physical token), they can't get into your Facebook account.

To enable two-factor authentication on your Facebook account:

Click the down arrow in the upper right corner of Facebook to access the menu.

Click Security and Login in the left pane.

Click Edit next to Use two-factor authentication .

You may be prompted to ensure your password. Enter it and then click Get Started .

Select either Text Message or Authentication App , and then click Next .

If you choose Text Message , enter the code in the fields provided. If you choose Authentication App , launch it on your phone and follow the instructions.

Click Finish when you see the Two-Factor Authentication Is On message.

Be wary of relying solely on text-message solutions for two-factor authentication. In addition to SIM spoofing (in which someone gets the phone company to reassign your number to a different device), if you lose access to your phone or you change phone numbers, you'll need help regaining access.

Prevention: Run Security Checkup

Facebook's Security Checkup feature adds additional security to your account. Use it to:

• Log out of Facebook and Messenger from unused browsers and apps.
• Receive an alert when someone logs in to your account from an unrecognized mobile device or computer.

Prevention: Change Your Facebook Password Regularly

Resetting your password regularly is a good habit to adopt. You can do it at any time.

Launch Facebook's menu from the down arrow in the upper right corner of the page.

Click Edit next to Change password in the Login section of the center pane.

Enter your current password next to Current , type a new password in the New field, and then type the new password once more to confirm in the Re-type new text box.

Click Save Changes .

Get the Latest Tech News Delivered Every Day

• How to Change Your Facebook Password
• How to Recover Your Facebook Password Without Email or Phone Number
• How to Turn on Two-Factor Authentication on Facebook
• How to Use Messenger Without a Facebook Account
• The Truth About Facebook Chain Status Updates
• How to Switch Accounts on Facebook
• How to Get Unblocked on Facebook
• How to Deactivate Facebook on iPhone
• What Is Facebook (FB) Lite?
• How to Download All Your Photos From Facebook
• How to Delete a Facebook Account on Android
• How to Tell If Someone Blocked You on Facebook
• How to Delete a Facebook Account Permanently
• How to Activate and Use Facebook Dating
• How to Deactivate Facebook Messenger
• How to Mark Yourself Safe on Facebook

• Do Not Sell My Personal Info

•  ⋅ 

7 Urgent Steps to Take When Your Facebook Account Gets Hacked

With all the information in our social media profiles, security is a top priority. Here's what to do if your Facebook account gets hacked.

Security and hacking issues are rampant in social media. If you have an account on Facebook, or any other social media network for that matter, it’s highly likely that your personal information has been compromised at some point.

In one recent Facebook hack, personal details including the full name, location, birthday, email address, phone number, and relationship status of more than half a billion Facebook users was stolen.

This includes 32 million accounts in the United States, 11 million in the United Kingdom, and 6 million in India.

Facebook has since released a statement claiming this breach was “old data” that was discovered and fixed in 2019.

Was that the hack of 540 million Facebook IDs, comments, and likes discovered in April 2019 ?

Or the 419 million phone numbers, names, and Facebook IDs exposed publicly in September 2019?

Turns out, it was yet another previously unreported incident:

“We believe the data in question was scraped from people’s Facebook profiles by malicious actors using our contact importer prior to September 2019. This feature was designed to help people easily find their friends to connect with on our services using their contact lists. When we became aware of how malicious actors were using this feature in 2019, we made changes to the contact importer.”

The bottom line? As Facebook gets bigger and more popular, the chances of your account getting hacked grow with it.

Here are your options for recovery and future protection. Check out these 7 steps you need to take if your Facebook account gets hacked.

Why Do Hackers Want Your Account?

There have been cases where unscrupulous types have hijacked accounts on Facebook, Instagram, Twitter, and Linkedin other platforms.

It could be someone you know, playing a practical joke. Or one of your exes out for revenge.

It could even be a case of relationship sabotage, or corporate espionage.

In such cases, your hacker might send nasty messages to your friends, expose private pictures, or delete all your contacts.

On other occasions, the aim is more commercial. You might get blackmailed.

The most common cases of social media-jacking aren’t personal.

There are areas on the Dark Web where people pay for unique usernames. It’s a bit like a digital vanity plate. So someone will hack your account, lock you out, and take it over, and sell it to someone else.

Whatever the circumstances behind your Facebook account being hacked, it’s an immensely personal violation. It feels like a break-in and can be every bit as distressing as a flesh-and-blood burglar.

What are your options for recovery and future protection?

Step 1: Confirm the Hack

The intercept may not necessarily be deliberate.

Maybe you didn’t log out and the next person took a peek. Or maybe someone was playing with your phone and scrolled through your account.

With this kind of “hack,” you can simply change your password and add a screen lock to your phone.

But if you were specifically targeted, or your data was part of a massive Facebook data breach , you need extra security measures.

To figure out if you’ve been hacked, you can visit HaveIBeenPwned .

Can You Still Log in?

If you can still log in, go to Settings > Security and Login . Look at the last devices you’ve logged in from, and check if any are unfamiliar.

You can also cross-check the dates to see which of those log-ins were (not) you.

For example, a log-in while you were asleep is a dead giveaway.

If anything appears suspicious, click the Log Out of All Sessions option in the lower right-hand corner and immediately move to Step 3: Change Your Password.

If you can’t log in, it means the hacker changed your password, which shows potentially malicious intent.

Talk to a trusted Facebook friend. Ask them to log in to their account and click on yours:

• Has your name, profile picture, or email changed?
• Are your friends deleted, and are there new friends (or friend requests to people) you don’t know?
• Are there new posts you didn’t put up?
• Are your friends receiving private messages that aren’t from you?
• Has the hacker contacted you?

Step 2: If You Can’t Log In, Report it to Facebook

Facebook has a convenient URL, https://www.facebook.com/hacked/ where you can let them know your account has been compromised, even when you can’t access your own account.

You’ll be prompted to type in the phone number or email you used to open the account.

Using these details, Facebook will help you regain access to your account.

Facebook will also ask how you think your account was hacked. The options included are:

• Posts/messages on your timeline that you didn’t write.
• Your private content has been made public.
• You found a duplicate account with your name and photos.

Based on your answer, Facebook will suggest security measures and “walk” you through them.

Step 3: Change All Your Passwords

The Facebook Reporting tool will nudge you to do so, but even if it’s a benign hack, change the password to be safe.

From a Desktop Computer:

1. Click on the down arrow in the upper right-hand corner and select Settings & Privacy .

2. From the menu, choose Settings .

3. In the upper left-hand side of the page choose Security and Login .

4. Toward the middle of the page, look for the Login options and click Edit .

5. Change your password

From a Mobile Device:

1. Click on the hamburger menu in the lower right-hand corner.

2. Scroll down until you see Settings & Privacy .

3. Choose Settings at the top of the list.

4. Under Security, choose Security and Login .

5. Toward the top of the page, look for the Login options and click Edit .

6. Change your password.

Log Out of All Sessions

At this point, if you haven’t done it already, it’s probably worth logging out of all sessions once your password is updated. Any app where you “logged in via Facebook” is especially at risk.

1. Follow steps 1-4 above.

2. From the Security and Login screen, look for the Where you’re logged in section and click See all .

3. At the bottom, click Log Out of All Sessions .

Change Your Other Passwords

If you’re like me, you probably use your Facebook password for other apps or even your email account. So, while you’re at it, change all your other passwords, too.

Use a password manager (LastPass is my personal favorite) to help.

Step 4: Double-Check Your Permissions

This applies in both cases – whether or not your passwords were changed without your consent.

Go to your apps and review who has access to your account. If there are apps you don’t recognize or no longer use, revoke their access.

You’ll find them under Settings > Apps and Websites .

After removing the apps, search your timeline for any posts those deleted apps had published on your behalf. You may delete them, but only if they bother you.

The apps may still have the data they collected in the past, but they can’t collect any more details from your account.

Step 5: Tighten Your Log-In Access

Facebook now offers two-factor authentication.

When someone logs in, a code will be sent to your mobile phone, verifying it’s you. This only works if the hacker doesn’t have your smartphone as well though.

Facebook has an option to have a pre-selected Facebook friend receive the authentication code on your behalf.

To enable two-factor authentication, go to Setting > Security and Login > Two-Factor Authentication .

You can also run a security check-up. It will log you off from all browsers. It will also notify you if anyone logs in from a phone or computer Facebook doesn’t recognize.

Step 6: Let Your People Know

Memes aside, you do need to inform your friends and followers you were hacked.

The hacker may have used their time in your account to contact your Facebook friends. They may have posed as you and asked for personal details, passwords, or even cash.

This may seem outlandish, but there are documented cases of someone looking through your friends’ list for “dad, mom, spouse” then messaging them something like, “I forgot the bank PIN, LOL, please text me?”

Or “I lost my wallet, please send me cab fare.”

Worse, the hacker may have piggy-backed off your account and used it to hack their accounts, maybe sending them a private message phishing link that infected their device.

Warn them not to open any links “you” sent while you were hacked. Advise them to secure their accounts, too.

Step 7: Review Your Privacy Settings

You probably haven’t reviewed your privacy settings since you set them (if you set them). Now, more than ever, it’s worth reviewing how your data is being shared and how accessible your information is online.

Reviewing Privacy Settings for the First Time

If you’ve never undertaken this exercise, do it from scratch. Facebook offers a helpful privacy shortcut that will help you check a few important settings.

On Desktop, navigate back to Settings and choose Privacy in the left-hand column. Once there, look for Privacy Shortcuts at the top of the page.

The Check a few important settings option will allow you to easily navigate and choose your desired settings for everything from ad preferences to how people can (or not) find you.

Under Privacy Shortcuts, choose Check a few important settings and follow the prompts to choose your desired privacy levels.

Updating Existing Privacy Settings

If you’re familiar with privacy settings or have gone through the process of settings these previously, double-check.

You can control who sees your posts, who can tag you, and other related elements. You can also check for caveats.

For example, in certain cases, if someone comments on a private post, it becomes public, so you can moderate comment permissions, too.

You can switch on/off video auto-play and face recognition, ensuring Facebook doesn’t automatically tag you in your friend’s photos.

You can also confirm automated geotagging (and preferably switch it off).

Stay Safe on Facebook

We’re so used to social media that we rarely think about what we type.

Often, our own actions and the details we share can put us at risk – not just from online hackers, but also from offline stalkers.

Review your Facebook settings to make it just a little harder for people to target you.

Before you hit Post think twice and be sure you’re not painting a bulls-eye on the back of that selfie.

Speaking of selfies, unless you’re running influencer campaigns , turn off the location stamp in your phone’s camera!

Bragging rights aren’t worth compromising your safety.

More Resources:

• 25 Amazing Facts About Facebook
• Facebook Merges Messenger With Instagram DMs
• Social Media Marketing: A Complete Strategy Guide

Image Credits

All screenshots taken by author, April 2021

Jon Clark is the Managing Partner and chief SEO at Moving Traffic Media, a boutique digital marketing agency in New ...

• PRO Courses Guides New Tech Help Pro Expert Videos About wikiHow Pro Upgrade Sign In
• EDIT Edit this Article
• EXPLORE Tech Help Pro About Us Random Article Quizzes Request a New Article Community Dashboard This Or That Game Happiness Hub Popular Categories Arts and Entertainment Artwork Books Movies Computers and Electronics Computers Phone Skills Technology Hacks Health Men's Health Mental Health Women's Health Relationships Dating Love Relationship Issues Hobbies and Crafts Crafts Drawing Games Education & Communication Communication Skills Personal Development Studying Personal Care and Style Fashion Hair Care Personal Hygiene Youth Personal Care School Stuff Dating All Categories Arts and Entertainment Finance and Business Home and Garden Relationship Quizzes Cars & Other Vehicles Food and Entertaining Personal Care and Style Sports and Fitness Computers and Electronics Health Pets and Animals Travel Education & Communication Hobbies and Crafts Philosophy and Religion Work World Family Life Holidays and Traditions Relationships Youth
• Browse Articles
• Learn Something New
• Quizzes Hot
• Happiness Hub
• This Or That Game
• Train Your Brain
• Explore More
• Support wikiHow
• About wikiHow
• Log in / Sign up
• Computers and Electronics
• Social Media
• Social Networking Services
• Facebook Privacy and Safety

How to Recover a Hacked Facebook Account

Last Updated: September 14, 2024 Fact Checked

This article was co-authored by wikiHow staff writer, Jack Lloyd . Jack Lloyd is a Technology Writer and Editor for wikiHow. He has over two years of experience writing and editing technology-related articles. He is technology enthusiast and an English teacher. This article has been fact-checked, ensuring the accuracy of any cited facts and confirming the authority of its sources. This article has been viewed 1,516,323 times. Learn more...

Did somebody hack your Facebook account and now you can't log in? Don't worry—Facebook takes hacking very seriously and you'll be able to recover your account. Whether you're using the Facebook mobile app or a web browser on your computer, we'll show you how to reset your compromised password using your backup SMS phone number or email address and restore security to your account.

Resetting Your Password on Mobile

• If you see Forgot Password? on this page, skip this step.

• If you never added your phone number to Facebook, you'll have to use your email address.

• via email - Facebook will send a reset code to your Facebook account's email address.
• via SMS - Facebook will text a reset code to your Facebook profile's registered phone number.

• Email - Open your email inbox, look for a message from Facebook, and note the six-digit code listed in the subject line.
• SMS - Open your phone's messages , look for a new message from a five- or six-digit phone number, and look for the six-digit code in the text's message.

• Make sure you don't wait more than a few minutes between receiving the code and entering it, or the code will be invalid.
• You can tap the Resend Code option to get a different code.

Resetting Your Password on Desktop

• Send code via email - Sends a six-digit code to the email address that you use to log into Facebook.
• Send code via SMS - Sends a six-digit code to the phone number that's associated with your Facebook profile.
• Use my Google account - Allows you to log into your Google account to verify your identity. This bypasses the code reset process.

• Email - Open your email inbox, look for an email from Facebook, and note the six-digit code in the subject line.
• SMS - Open your phone's messages , look for a text from a five- or six-digit phone number, and note the six-digit code in the text.
• Google account - Enter your email address and password.

• Skip this step if you used a Google account to reset your password.

Reporting the Hacked Account to Facebook

• I saw a post, message, or event on my account that I didn't create
• Someone else got into my account without my permission
• I don't see the right option on this list

• If you check one of the options not listed in the "valid reason" section previously, you'll end up on a Facebook help page instead.

• If you don't see this option, skip this step.

• If you're prompted to edit posts that you created, just click Skip at the bottom of the page.

Community Q&A

• While there isn't a cut-and-dry way to avoid being hacked on Facebook, constantly updating your password and refraining from opening links from people whom you don't know are both methods that will strongly reduce the likelihood that you get hacked. Thanks Helpful 0 Not Helpful 1

Tips from our Readers

• Don't make my mistake of desperately contacting shady third parties when your account gets hacked. This will likely create more headaches. You should always go through proper legal channels for account security issues. Stay patient and persistent with Facebook's support team.
• Don't assume Facebook can instantly restore your account access. Investigations take time, especially with millions of users. Try to be patient and politely follow up if it takes over a week. If you feel ignored, firmly but kindly escalate your request.
• If the hacker changed your account's recovery contact info, you'll need to provide your previous credentials or as many account details as possible when submitting the issue to Facebook. This gives them the best chance of verifying your identity.
• You should enable two-factor authentication after regaining access to your account. This adds an extra login code sent to your phone for extra security. You may also want to change your password monthly.
• If the hacker removed your recovery phone number or email address associated with your account, provide any previous contacts you used when reporting the issue to Facebook.

• There is no way to guarantee that you can get your account back after it has been hacked. Thanks Helpful 27 Not Helpful 17

You Might Also Like

• ↑ https://www.facebook.com/help/105487009541643?cms_platform=mobile-basic&helpref=platform_switcher
• ↑ https://www.facebook.com/help/mobile-touch/236624156442383
• ↑ https://www.facebook.com/help/105487009541643
• ↑ https://www.facebook.com/help/213481848684090
• ↑ https://www.facebook.com/help/213395615347144

About This Article

1. Open the Facebook app. 2. Tap Need Help? 3. Tap Forgot Password? 4. Search for your email address or phone number. 5. Select a recovery method. 6. Retrieve the confirmation code. 7. Enter the code and tap Continue . 8. Follow the on-screen instructions. Did this summary help you? Yes No

• Send fan mail to authors

Is this article up to date?

Featured Articles

Trending Articles

Watch Articles

• Terms of Use
• Privacy Policy
• Do Not Sell or Share My Info
• Not Selling Info

wikiHow Tech Help Pro:

Level up your tech skills and stay ahead of the curve

My Facebook Account Is Hacked & Email Changed! What To Do?

Featured On

Facebook.com hacked what do i do if i’ve been hacked on facebook.

If you are reading this blog, it’s most likely because you’ve noticed suspicious activity regarding your Facebook account, and you are wondering, ‘What do I do next?’ and ‘How to recover hacked Facebook account’ may be at the forefront of your concerns and Google searches.

With numerous groups, pages, and friends’ profiles to comment on, Facebook scrolling is an addictive pastime. However, due its immense popularity, this leading social media platform has also become a prime target for hackers and cybercriminals looking to exploit personal information, enact scams, and generally wreak havoc on our digital lives. It can be very distressing to discover that your Facebook account has been hacked, and your data violated, but taking swift action and increasing awareness can help you regain control and protect your privacy. This blog post will explore what to do if your Facebook account was hacked and password changed: How to manage a hacked Facebook account recovery, how to report a compromised Facebook account, and what to do to prevent FB hacks from happening in the first place.

Have you been scammed? Check your personal info is safe.

Facebook scams

A hacked Facebook account may be the result of a Facebook scam. As one of the world's largest social media platforms, Facebook is a prime target for scammers seeking to exploit its vast user base. Facebook scams are continually evolving, but by staying informed and cautious, you can protect yourself from falling victim. Some of the most prevalent Facebook scams today include:

1. Facebook phishing scams

Phishing scams on Facebook often come in the form of messages or posts that appear to be from a trusted friend or company. These messages usually contain a link that directs you to a fake Facebook login page or a malicious website designed to steal your personal information, including login credentials and financial details.

2. Fake giveaways and contest Facebook scams

Scammers often create fake giveaways or contests, promising valuable prizes like electronics, vacations, or money. To participate, users are asked to like, share, and comment on the post, or to provide personal information. These scams are designed to collect personal data or to spread malware.

3. Impersonation Facebook Scams

In impersonation scams, scammers create fake profiles pretending to be someone you know or a public figure. They might send friend requests and, once accepted, ask for money, gift cards, or personal information, claiming to be in an emergency situation.

4. Investment and Cryptocurrency Facebook Scams

With the rise of cryptocurrency, scammers are increasingly promoting fake investment opportunities on Facebook. These scams promise high returns with little risk and often require an initial investment. Once the money is sent, the scammer disappears, and the victim loses their investment.

Facebook account hacked - What do I do if I’ve been hacked on Facebook?

Facebook hacked and wondering what to do next? Follow the steps below as soon as possible, in order to minimize the potential damage of a hacked Facebook account:

Step 1: How to recognize the signs of a hacked Facebook account

Recognizing the signs of potential compromise is the first step in safeguarding your Facebook account. Some common indicators that your Facebook account has been hacked and password changed include unauthorized login attempts - if you receive notifications about login attempts from unfamiliar devices or locations, your account may have been compromised. Suspicious activities like unfamiliar posts, messages, or friend requests appearing on your timeline can also be a sign of unauthorized access. Finally, hackers may change your profile information or delete content, affecting your online identity.

Step 2: Log out of all devices

If you still have access to your account, log out from all devices immediately. This can be done by going to "Settings & Privacy" > "Settings" > "Security and Login" > "Where You're Logged In." From there, you can log out of all sessions.

Step 3: Secure your computer and devices

Run a security scan on your computer and other devices with a next-generation endpoint security system like RAV Endpoint Protection that can detect malware or viruses that could have contributed to the hack.

Step 4: Report Facebook account hacked

Facebook offers several security features to help you maintain the integrity of your account. As well as following the action items mentioned above, you must report Facebook account hacked as soon as possible. For hacked accounts, click your profile picture image on the home screen. Select “Help & support" and search for “Account hacked” and click the correct link. Then follow the provided instructions to report the compromised Facebook account.

If the Facebook hacker sent suspicious messages or posts from your account, you need to let friends and contacts know that “someone hacked my Facebook” and your account has been compromised. They should be aware of any Facebook Messenger messages that they receive ostensibly from you, and it’s important that they do not click on any suspicious links or provide personal information. You should also keep an eye on your account for any unusual activity, even after you’ve secured it. This will help you detect any further unauthorized access. Additionally, stay vigilant against any other scams or phishing attempts that may be targeted at you during this time.

Hacker changes password and linked email! What do I do next? Recovering a hacked Facebook account

If you find yourself asking the question, “What do I do if I've been hacked on Facebook" - whether it's because you can see your account has been hacked, your password changed, or your linked email has been compromised, it's crucial to act swiftly. It’s highly likely that a hacker is trying to steal your identity - so it’s time to do some damage control! Recovering a hacked Facebook account takes a little bit of time and patience. As hackers utilize the Facebook recovery protocols to hack the account in the first place, companies like Meta have committed to setting up lengthy recovery processes in response. Nevertheless, if your Facebook account has been hacked, and the hacker has changed your password and linked email, it's crucial to take immediate action to regain control and secure your account by following the steps below:

Step 1: Facebook password hacked? Change your password!

If your Facebook was hacked and password changed, you can still repair the damage. If you can still access your account, lock out the hackers by changing your password immediately.

To change a Facebook password on an iOS or Android device:

Go to the “Menu” icon in the bottom right corner of your screen in the Facebook app. Select “Settings & Privacy” > “Settings” > “Meta Accounts Center” > “Password and Security”. Under the “Login & recovery,” header, select “Change password” and follow the directions to create a new password

To change a Facebook password on a web browser:

Log in to your account at Facebook.com. Click on your profile photo in the upper right-hand corner of the screen. Select “Settings & privacy” > “Settings” > “Meta Accounts Center” > “Password and security”. Under the “Login & recovery,” header, select “Change password” and follow the directions to create a new password

Remember to use a strong and unique password that includes a mix of upper and lowercase letters, numbers, and special characters. It’s also often recommended to make your password between 8-14 characters in length.

If you can't access your account, go to the Facebook login page and click on the "Forgot Password" link. Follow the prompts to reset your password. You may need to provide information like your email address, phone number, or security questions associated with your account.

Step 2: Facebook hacked and email changed? Secure your email

If you find your Facebook account hacked and email changed, take steps to recover and secure your linked email account. Most services, including Facebook, use your linked email for password recovery. Since email is often a primary means of communication and a common method for recovering access to other online accounts, securing it is a crucial step in regaining control of your digital presence and preventing further unauthorized access to other online accounts.

• Change the passwords for your email accounts.
• Enable two-factor authentication (2FA) for these email accounts.
• Review recent activity on your email account for any signs of unauthorized access.
• Review and update the security settings of your email account. This may include reviewing connected devices, ensuring that only authorized devices have access, and setting up recovery options.
• Review the third-party applications or services that have access to your email account. Revoke permissions for any apps that you no longer use or trust.
• Ensure that your email account's recovery information, such as alternate email addresses or phone numbers, is up to date. This information is crucial for regaining access if you forget your password.

Step 3: Enable two-factor authentication (2FA)

Once you have changed your password and secured your linked email, you will hopefully find you still have access to your Facebook account. Now you should enable two-factor authentication for your Facebook account. This adds an extra layer of security by requiring a code from your mobile device in addition to your password. Go to Menu, ‘Settings & privacy”, “Meta Account Center”, “Password and security”. Under “Login Recovery” is a “Two-factor authentication” tab.

Step 4: Review account activity

Check your recent Facebook account activity to see if there have been any unauthorized actions. In the Security Settings menu, go to Password and Security (or “Security and Login” on a desktop) > Where you’re logged in. If you see multiple unauthorized logins, it is recommended to log out of all of them.

Step 5: Check other linked accounts

If you use the same password for multiple accounts, change the passwords of those accounts immediately. This prevents the hacker from accessing other services using the same credentials. Review the apps and services connected to your Facebook account, and remove any apps you don't recognize or trust. If you've set up trusted contacts on your account, you can reach out to them to help you regain access. Facebook will send codes to your trusted contacts, and you can use these codes to recover your account.

Prevent being scammed. Check your personal info isn't in the hands of cybercriminals.

Help! I can’t find my Facebook account!

If you've asked the question, "Help! I can't find my Facebook account!" Look no further, these are the most effective steps you can take to get it back:

Step 1: Open Facebook on all devices

Open the app or webpage on any of the devices you usually use, and see if any of them are still logged in - with any luck the hacker missed one! If any of your devices still open your Facebook page without logging you out first, this is great news - you can follow the recovery steps mentioned above. If not, move on with the next step in the account recovery process.

Step 2: Locate your account

In order to find your account, visit facebook.com/login/identify. You will need to enter the email address or phone number used to create your account. You can also enter your name or your Facebook profile URL into the search function if the search isn’t successful using your email address and phone number. Click “Search” and the following page should generate a list of Facebook accounts that relate to your details. If you see your account, you can select it to begin the password reset process.

Step 3: Change your linked email address

If the system is able to locate your account: It will ask to send a verification code to the address or phone number currently associated with the account. If the account or phone number listed does not belong to you. Select “No longer have access to these," then select “Cannot access my email.” In most cases, this should prompt Facebook to start the process of changing the email address associated with your account. If this STILL doesn’t happen, continue following the steps below to advance the recovery process:

Step 4: Declare hacked account

Visit facebook.com/hacked and select “My account is compromised.” You will be asked to enter your account’s current password or a previously used password. After entering the password, select “Secure my account,” and then, “I cannot access these.”

Step 5: Try an alternative device

If you are still unable to change your account’s email address, try using your mobile device. Log in using the Facebook app and select “Forgot password”. Choose the prompts indicating that you can’t access the account’s current phone number and email address. After following these prompts, you should receive a form to fill out, requesting a change to your account’s primary address. You may need to submit a photo of your ID to Facebook support. Following this, you should receive an email to your account’s new address with a link to reset your password.

Step 6: Clean up your account settings

Click the profile picture logo on the top right of your home screen, then "Settings & privacy" > "Settings" > "Meta Accounts Center" > "Password and security" - > "Two Factor Authentication". Download an authenticator app like Google Authenticator on your mobile device and use it to set up two-factor authentication (2FA) for your Facebook account.

Then go to the “General” tab and remove the hacker’s phone number, email address, and any other unfamiliar contact information. Review the devices and locations listed under “Where you’re logged in,” and make sure everything looks accurate. Finally, visit the “Setting up extra security” section and sign up for alerts that notify you whenever Facebook detects a sign-in on an unusual web browser or unrecognized device.

When all else fails: Contact Facebook Help Center

If you are unable to recover your hacked Facebook account using the standard methods, you are locked out of your account, or you are unable to reset your password because the hacker has changed your email address or phone number, you can contact Facebook's support for assistance. Visit the Facebook Help Center under “Menu” > “Help & Support” and enter your query.

“How can I hack someone’s Facebook account?” AKA: Why would someone want to hack my Facebook account?

There are several reasons why someone might ask the question, how can I hack someone's Facebook account? ... Or would want to hack a Facebook account, such as data theft - using Facebook accounts to gather personal information which can be used for various purposes, including identity theft , fraud, or targeted advertising. Financial gain is another reason because gaining access to a Facebook account can potentially enable financial scams or fraud. Another is revenge or harassment - using a Facebook account to access sensitive information, post damaging or embarrassing content, or online impersonation. This could be motivated by personal vendettas, conflicts, or cyberbullying . Finally, political or ideological reasons - targeting individuals or organizations for political or ideological reasons, seeking to disrupt communication, spread propaganda, or gather intelligence by gaining access to Facebook accounts associated with their targets.

How to hack Facebook account

It's important to emphasize that hacking into someone's Facebook account is illegal and unethical. There are several potential methods that can be used when someone is looking into how to hack Facebook accounts:

• Phishing : Attackers create fake login pages that mimic the Facebook login page, and then send phishing emails or messages containing links to these fake pages, tricking users into entering their login credentials. Once the user submits their information, the attacker can then access their account.
• Password guessing : Attackers may attempt to guess a user's password by trying common passwords, using personal information gathered from social media profiles, or using automated tools that systematically try different combinations of characters until they find the correct password.
• Brute force attacks : In a brute force attack , attackers use automated software to try a large number of passwords until the correct one is found. This method requires a significant amount of time and computing power but can be effective if the target's password is weak.
• Social engineering : Attackers may use social engineering tactics to trick users into revealing their login credentials. This could involve posing as a trusted individual, such as a friend or colleague, and persuading the victim to share their password or reset it to a new one controlled by the attacker.
• Malware : Malicious software installed on a user's device can capture their Facebook login credentials and send them to the attacker. Malware can be distributed through infected email attachments, compromised websites, or malicious software downloads.
• Account takeover via third-party apps : Users often grant access to third-party apps or websites using their Facebook account. If one of these third-party apps is compromised, attackers can gain access to the user's Facebook account through the connected authorization token.
• Security vulnerabilities : Occasionally, security vulnerabilities in Facebook's systems or in third-party applications connected to Facebook can be exploited by attackers to gain unauthorized access to accounts.

Preventing a “Facebook account hacked and locked” scenario

Preventing a “Facebook account hacked and locked” scenario is equally crucial to prevent a Facebook account being hacked and locked in the first place. You can safeguard your account from future attacks by taking the following preventative measures:

• Use strong passwords : Create unique and complex passwords that include a mix of uppercase and lowercase letters, numbers, and special characters. Avoid using easily guessable information, such as your name or birthdate.
• Keep your email account secure : As your Facebook account is often linked to your email, make sure your email account is well-protected with a strong password and two-factor authentication.
• Be wary of phishing attempts : Be cautious of suspicious links or emails claiming to be from Facebook. Avoid providing your login details on unfamiliar websites.
• Regularly review connected apps : Periodically check the apps and websites connected to your Facebook account, and remove any that you no longer use or trust.

Educate yourself and stay informed

While discovering that your Facebook account has been hacked can be a distressing time, taking swift action and staying informed about the latest security features and best practices can help you regain control and secure your profile. Be cautious of suspicious links and emails, as hackers often use phishing tactics to gain access to your account. Familiarize yourself with Facebook's privacy settings and adjust them to suit your preferences. Learning to recognize the signs of a compromised account, changing your password, enabling two-factor authentication, and utilizing Facebook's security features are essential steps to secure your privacy and protect against online identity theft . Lastly, avoid using the same password for multiple accounts. By staying educated and vigilant, you can enjoy a safer and more secure experience on the world's largest social media platform. For more information and advice on staying safe online, visit reasonlabs.com .

Must-Read Articles

Recent articles.

Discover more