What do I do if my Instagram account gets hacked?

Getting hacked can feel scary, but Instagram has pathways to help you regain access and protect your account going forward. Acting quickly and confidently greatly increases your chances of recovery.

Step 1: Recognizing the hack

You may be hacked if:

  • You can no longer log in
  • The email or phone number linked to your account has changed
  • Your profile info was altered
  • You see posts, messages, or activity you didn’t do
  • Password reset emails arrive that you didn’t request
  • Friends report strange DMs from your account

Important: Don’t ignore early signs. Recover sooner rather than later.

Step 2: Secure your email first

Before you reset anything on Instagram, make sure your email account is secure.

If the hacker also controls your email, they can intercept recovery messages.

Action Steps:

  1. Change your email password immediately.

  2. Enable two-factor authentication (2FA) on your email.

  3. Remove any unknown email forwarding or recovery rules.

If your email is compromised, fix that first.

Step 3: Try logging in & resetting password

If You Still Have Access

  1. Open Instagram

  2. Go to Settings → Security → Password

  3. Enter a strong, unique password

If You Can’t Log In

Use the recovery flow:

  • On login screen, tap Forgot password?
  • Enter your email address, phone number, or username
  • Choose a recovery method

Instagram will send a recovery link or code.

Step 4: Use Instagram's hacked account help

If normal login recovery doesn’t work (e.g., email or phone was changed):

  1. On the login screen, tap Get help logging in (Android) or Forgot password? (iOS)

  2. Tap Need more help?

  3. Follow the on-screen steps

Instagram may ask you to:

  • Confirm your identity
  • Provide a photo of yourself
  • Verify recent account details
  • Provide the email you originally signed up with

This may take a little time, so be patient.

Step 5: Undo unauthorized changes

Once you regain access:

Undo the following immediately

  • Email address
  • Phone number
  • Linked Facebook account
  • Username
  • Bio/website

Remove suspicious activity:

  • Posts you didn’t make
  • Stories you didn’t post
  • DMs you didn’t send
  • Third-party apps with access


Go to:
Settings → Security → Apps and Websites → Active
Remove anything you don’t recognize.

Step 6: Lock down your security

Once you’re back in:

Enable Two-Factor Authentication (2FA)

Go to:
Settings → Security → Two-Factor Authentication

Recommended methods:

  • Authentication app (best)
  • SMS text message (good)
  • Backup codes (keep them safe)

Review Login Activity

Go to:
Settings → Security → Login Activity

If you see unfamiliar locations/devices:

  • Tap the three dots next to them
  • Select Log Out

Change Other Account Passwords

Because many hacks involve reused login info:

  • Email accounts
  • Other social platforms
  • Any site using the same password

Use a password manager to create strong unique passwords.

If Instagram won't let you back in

Sometimes standard recovery fails. Try these options:

Try From a Known Device

Use a device you’ve previously logged in from (same phone or computer).

Try From a Known Location

Recover from a location where you commonly used Instagram.

Submit an Appeal

From Need more help? screen:

  • Choose the option that matches your situation
  • Instagram will ask for a selfie video or ID scan

Be patient. Responses may take 24–72 hours.

Expectations & timelines

You may need to repeat steps or try multiple recovery paths, that’s normal.

Long-term protection tips

Use strong passwords

  • At least 12 characters
  • Mix letters, numbers, symbols

Never reuse passwords

Don't click suspicious links

Phishing is the # way accounts get compromised.

Watch for:

  • Fake “security alerts”
  • Messages claiming urgent problems
  • URLs with misspellings

Limit third-party app access

Only connect apps you trust.
Revoke old ones frequently.

Adjust privacy settings

Consider:

  • Private account
  • Restrict vs block unknown users
  • Limit message requests

Please note: Instagram occasionally changes their account recovery procedures, so refer to their website if these steps are not working. Good luck!