How to Recover a Hacked Facebook Account
Facebook holds a lot for many of us: photos, family groups, messages and years of memories. So losing access, or finding that someone is posting as you, is genuinely upsetting. The good news is that Facebook has a built-in recovery process, and most people get their account back by following it carefully.
This guide takes you through it step by step, then shows how to lock the account down afterwards. If you are helping an older parent, it is a good one to do together. For more ways to protect yourself online, see our complete guide to staying safe online.
Quick answer
Go to facebook.com/hacked on a computer or phone browser. Facebook will walk you through proving who you are and resetting your password. Once you are back in, set a new strong password, turn on two-factor authentication, and check that your name, email and phone number have not been changed.
Step 1: Start at facebook.com/hacked
Open your browser and type facebook.com/hacked into the address bar yourself. This is Facebook’s official page for compromised accounts. It will ask why you think your account has been taken over and guide you through securing it. If you can still log in, do this straight away before the hacker locks you out fully.
Step 2: Reset your password
If you cannot log in, use the “Forgotten password” link on the Facebook sign-in page. Facebook will offer to send a code to your email or phone. Enter it, then choose a new strong password. If the hacker has changed your email and phone, choose “no longer have access to these” and follow the steps to identify yourself another way.
Step 3: Check what was changed
Once back in, look through your settings carefully. Hackers often change small things to keep control or to scam your friends:
- Check your name, email and phone number are still correct.
- Review recent posts and messages, and delete anything you did not send.
- Look at “Where you’re logged in” and log out any device you do not recognise.
- Remove any unfamiliar apps connected to your account.
Step 4: Lock it down and warn friends
Turn on two-factor authentication in your security settings, so a code is needed as well as your password. Set a strong, unique password you do not use elsewhere. Then post or message your friends to say your account was hacked, so they ignore any dodgy messages, especially ones asking for money or sharing odd links. Our guide on two-factor authentication shows you how.
If the hacker used your account to ask friends for money or to push a fake investment, report it to Scamwatch at scamwatch.gov.au, and let any friends who paid know to contact their bank.
Before you finish
Download the free Family Tech Safety Checklist to help check phone safety, passwords, scam messages, emergency contacts and medical alarm details.
FAQ: Recovering a hacked Facebook account
Where do I start?
Type facebook.com/hacked into your browser. It is Facebook’s official recovery page and will guide you through securing the account.
The hacker changed my email and phone. Can I still recover it?
Yes. Choose the option that says you no longer have access to those, and Facebook will offer another way to confirm it is you.
Friends are getting scam messages from me. What should I do?
Tell them your account was hacked and to ignore the messages, especially any asking for money or with links. Then secure the account.
How do I stop it happening again?
Use a strong, unique password and turn on two-factor authentication so a login needs a code as well as the password.
Should I report it?
If money was involved, report it at scamwatch.gov.au and tell any friends who paid to contact their bank.
