How to Recover a Hacked Facebook Account

Step by step

1. 2 min

   Check if you can still log in

   Go to facebook.com and attempt to log in with your email and password. If successful but you notice suspicious activity, proceed to step 4. If login fails because your password was changed, continue to step 2.

   Note: Clear your browser cache and try logging in from an incognito window to rule out browser issues.
2. 2 min

   Use Facebook's account recovery tool

   Navigate to facebook.com/login/identify and enter your email address or phone number. Click 'Search' then select your account from the results. Choose how you want to receive your reset code - email or SMS.

3. 3 min

   Reset your password

   Enter the 6-digit code sent to your email or phone. Create a strong new password using at least 12 characters with a mix of uppercase, lowercase, numbers, and symbols. Avoid using personal information or previously used passwords.

   Note: Use a password manager to generate and store a unique, complex password.
4. 5 min

   Review and remove suspicious activity

   Go to Settings & Privacy > Settings > Security and Login. Check 'Where You're Logged In' for unfamiliar devices or locations. Click the three dots next to suspicious sessions and select 'Log Out'. Review recent posts, messages, and friend requests for unauthorized activity.

   Note: Screenshot any suspicious activity before removing it as evidence for Facebook support if needed.
5. 3 min

   Enable two-factor authentication

   In Settings > Security and Login, find 'Use two-factor authentication' and click 'Edit'. Choose 'Text message' or 'Authentication app' as your method. Follow the prompts to complete setup and save your backup codes in a secure location.

   Note: Authentication apps like Google Authenticator or Authy are more secure than SMS codes.
6. 3 min

   Check connected apps and remove unauthorized access

   Navigate to Settings > Apps and Websites. Review all connected applications and remove any you don't recognize by clicking the checkboxes and selecting 'Remove'. Pay special attention to apps requesting extensive permissions.

   Note: Regularly audit connected apps every few months to maintain account security.
7. 2 min

   Verify your recovery information

   In Settings > General > Contact, confirm your email addresses and phone numbers are current and belong to you. Remove any unfamiliar contact information the hacker may have added. Add a trusted contact who can help you regain access if needed.

   Note: Set up multiple recovery methods so you have backup options if one becomes unavailable.
8. 2 min

   Report the hack to Facebook

   Visit facebook.com/hacked and select 'My Account Is Compromised'. Follow the prompts to report the incident and provide details about what happened. Facebook may provide additional security recommendations or investigate further.

   Note: Keep documentation of the hack and recovery process in case you need to reference it later.