Recovering a Hacked Social Media Account: Step-by-Step Guide (Any Platform)

Realizing your account has been hacked is disorienting: sometimes you're locked out entirely, sometimes you can still see it being used by someone else in real time. The steps below apply across Instagram, Facebook, TikTok, LinkedIn, and X, with only small differences in where to click.

Step 1: Confirm what actually happened

Before anything else, distinguish between two very different situations:

• You've been logged out and can't log back in, meaning the password (and possibly the linked email) was changed.
• You can still access the account, but notice unfamiliar posts, messages, or follows, meaning someone has a session open without having locked you out yet.

If you're still logged in, act immediately: change your password, log out of all other sessions, and enable two-factor authentication before doing anything else. This alone can end the intrusion in seconds.

Step 2: If you're locked out, use the platform's official recovery flow first

Every major platform has a dedicated "hacked account" recovery form, separate from the standard password reset. It's usually more effective because it treats the case as a security incident rather than a routine forgotten password, and asks for details that help confirm you're the legitimate owner: previous passwords, account creation date, associated email addresses, recognizable contacts.

Fill this out as completely and accurately as possible. Vague or incomplete submissions are far more likely to stall.

Step 3: Alert your contacts if the account is being actively misused

If the hacker is using your account to message your contacts (a common tactic, often involving fake cryptocurrency offers or urgent money requests), a short public post on another platform or a message to close contacts warning them can limit real damage while you work on recovery.

Step 4: Check whether other accounts share the same password

If the same password was used elsewhere, especially email, banking, or other social accounts, change those too, immediately. Hackers who successfully breach one account routinely test the same credentials everywhere else.

Step 5: Document everything

Screenshots of unauthorized activity, the exact time you noticed the issue, and any confirmation emails from the platform all help build a stronger case if you need to escalate beyond the standard automated recovery flow.

When the standard recovery flow doesn't work

The official recovery form works in a meaningful share of cases, but it can also stall for weeks with no clear response, especially when the hacker has also changed the linked email or phone number, which is common. This is the point where most people get stuck: the case exists somewhere in the platform's system, but there's no way to tell if it's being reviewed or if it's effectively dead.

This is exactly the situation our service is built for: we don't attempt to bypass any security measure, we work through the same official escalation channels available to everyone, but with the experience of knowing which documentation and framing actually moves a stalled case forward.

Bottom line

Speed and precision in the first hour matter more than almost anything else. If you're past that window and stuck with a hacked, inaccessible account on Instagram, Facebook, TikTok, or another platform, we're happy to take a free first look at your case on WhatsApp.