What do I do if my Facebook account gets hacked?

If your Facebook account was hacked, you can recover it, but you need to move fast and follow Facebook’s official recovery path. Here’s a clear, step-by-step guide that works in most cases.

Step 1: Go to Facebook's account recovery page

Start here (this is the official recovery flow):

facebook.com/hacked

Choose “Someone else got into my account” and follow the prompts.

This tells Facebook you’re dealing with a security issue, not just a forgotten password.

Step 2: Secure your email first

If the hacker changed your Facebook email, you need to protect your email account immediately.

  • Change your email password
  • Enable two-factor authentication (2FA)
  • Check for forwarding rules you didn’t set
  • Review recent login activity

If your email isn’t secure, Facebook recovery won’t stick.

Step 3: Reset your Facebook password

If you still have access:

  • Change your Facebook password immediately
  • Choose Log out of all sessions
  • Remove any unfamiliar devices or locations

Use a new, unique password you’ve never used elsewhere.

Step 4: Reverse unauthorized changes

Facebook will ask if:

  • Your email was changed
  • Your password was changed
  • Posts or ads were made without you

Confirm everything you didn’t do.

If you see an email from Facebook saying “Was this you?” click No, secure my account immediately.

Step 5: Verify your identity (if locked out)

If you can’t log in at all, Facebook may require identity verification.

You may need to:

  • Upload a government-issued ID
  • Take a selfie video
  • Confirm recent account activity

This step can take 24–72 hours (sometimes longer).

Step 6: Check ads and payment methods

Hackers often:

  • Run ads
  • Add payment methods
  • Spend money quickly


Go to:

  • Ad Center
  • Payments
  • Business Manager

Remove anything you don’t recognize and report fraudulent charges to Facebook and your bank.

Step 7: Turn on strong security settings

Once you regain access:

  • Enable Two-Factor Authentication
  • Review Login Alerts
  • Remove suspicious connected apps
  • Check Authorized Devices

This prevents the hacker from getting back in.

Step 8: Warn your friends (briefly)

Hackers often message contacts to spread scams.

Post a short message like:

“My account was hacked earlier—please ignore any strange messages or links from me.”

Then delete it after a day.

If Facebook won't let you recover the account

Try these backup options:

  • Use http://facebook.com/login/identify
  • Try recovery from a previously used device or location
  • Repeat the hacked flow after 24–48 hours
  • If ads or payments were involved, use Facebook’s Business Support channels (they respond faster)

Unfortunately, Facebook does not offer live phone support for most users.

How long does Facebook recovery take?

  • Best case: a few hours
  • Typical: 1–3 days
  • Complex cases: up to 1–2 weeks

Persistence matters. Many recoveries succeed on a second attempt.

How to prevent your Facebook from being hacked again

  • Never reuse your Facebook password
  • Enable 2FA with an authenticator app (not SMS if possible)
  • Don’t click links sent via Messenger
  • Remove unused third-party apps
  • Limit how much personal info is public on your profile

One final tip

Most Facebook hacks happen because:

  • The same password was used elsewhere
  • A phishing link was clicked
  • Email access was compromised first

Locking down email + Facebook together is the key to recovery that sticks.

Please note: Facebook occasionally changes their account recovery procedures, so refer to their website if these steps are not working. Good luck!