Facebook Account Hacked? What to Do Now
TL;DR: If your Facebook account has been hacked, facebook.com/hacked is the fastest official recovery path. Here's the exact process, how to warn your contacts before the hacker messages them, and how to lock the account down afterward.
👉 See if your data's already leaked — free 30-second check →
A hacked Facebook account is especially urgent because of how fast it can be used against people you know — scam messages sent to friends and family, often asking for money, usually within minutes of the takeover. Speed matters here more than with most account recoveries.
Signs Your Facebook Account Has Been Hacked
- You're logged out and your password no longer works.
- Posts, messages, or friend requests you didn't make.
- Your name, profile photo, or email on the account has changed.
- Friends mention receiving strange messages "from you."
Step 1: Go to facebook.com/hacked Immediately
This is Facebook's dedicated recovery flow for compromised accounts, separate from the standard "forgot password" page. It walks you through identifying the account and securing it, and is generally faster than general support channels.
Step 2: Warn Your Contacts Right Away
If you have any other way to reach close contacts — WhatsApp, a text message, a call — let them know your Facebook is compromised and not to trust messages or money requests from it until you confirm you're back in control. This single step prevents most of the real damage a hacked Facebook account causes.
Step 3: Once You're Back In
- Check "Where You're Logged In" under Settings → Security and Login, and log out any unfamiliar session.
- Review recent activity — delete any posts, messages, or ads you didn't create.
- Check linked apps under Settings → Apps and Websites, and remove anything unfamiliar.
- Change your password, and make sure it isn't reused anywhere else.
- Turn on two-factor authentication under Security and Login.
If Instagram Is Linked or Also Affected
Facebook and Instagram accounts are often connected, and a compromise can spread between them. See Recovering a Hacked WhatsApp or Social Account for the Instagram-specific recovery steps alongside this one.
If You Can't Get Back In
Use Facebook's "Find your account" flow with your phone number or email, and if that fails, the platform's identity-confirmation process (sometimes requiring a photo ID) is the fallback route. It's slower, but it works for accounts that have been fully locked out.
After Recovery
A Facebook hack often traces back to a phishing link or a reused password from another breach. Checking your wider exposure helps you understand whether this was isolated or part of something bigger.
Checking Your Broader Exposure
Scan My Shadow checks your phone number and email across 1,500+ sources and shows you exactly what's publicly exposed — useful context after any account takeover.
Related Reading
- Recovering a Hacked WhatsApp or Social Account — the Instagram and WhatsApp recovery steps too
- Twitter/X Account Hacked? What to Do Now — recovery steps if X is also affected
- Google Account Hacked? What to Do Now — if your linked email is compromised too
FAQs
What is facebook.com/hacked?
It's Facebook's dedicated recovery flow for compromised accounts — faster and more specific than the general password reset page.
Why should I warn my contacts before I've even recovered the account?
Because hacked Facebook accounts are often used within minutes to scam friends and family — a quick warning through another channel prevents most of the real damage.
What if I can't get back in at all?
Use Facebook's 'Find your account' flow, and if that fails, the identity-confirmation process — sometimes requiring a photo ID — is the fallback route.
Should I check Instagram too?
Yes, if it's linked to the same Facebook account — a compromise can spread between them.
How do I stop this from happening again?
Turn on two-factor authentication, use a unique password, and review connected apps regularly under Settings.
Curious what's already out there about you? Scan My Shadow checks your phone number and email across 1,500+ sources and sends you a clear report — no guesswork, just facts. Start your scan.
- Results within about 5 minutes
- Clear, plain-English report
- Delivered straight to your inbox
- No login or passwords required
- Scan data deleted after report is generated