Signs your Facebook account was hacked
You may not be sure yet. These are the usual signs.
- You got an email that your password, email or phone was changed, and it was not you.
- Friends say they got strange messages or links from you.
- Posts or ads appear that you did not make.
- Your name or profile photo changed.
- You are logged out and your password no longer works.
- A page you own has a new admin you do not know.
One sign is enough to act. Do the steps below in order.
Step 1: Secure your email first
The hacker may have your email too. That is the key to everything else. Log into your email. Change the password. Turn on two-factor authentication there. Check the settings for forwarding rules you did not add. Only then move to Facebook.
Step 2: Go to facebook.com/hacked
Open facebook.com/hacked on a device you have used before. Pick the option that fits, such as “someone else got into my account”. Facebook will ask you to find the account by email, phone, name or username.
Use a device and network you normally use. Facebook trusts a known phone more than a new one.
Step 3: Reset the password
The flow sends a code to your email or phone. Enter it. Set a new password that you have not used anywhere else. Long and random beats clever.
If the code goes to an email or number you do not control, skip to the section on changed contact details below.
Step 4: Log out all other sessions
Go to Accounts Center → Password and security → Where you’re logged in. Review every device. Log out any you do not know. When in doubt, log out all of them. You can log back in.
Step 5: Remove unknown apps and devices
Still under Password and security, check:
- Apps and websites: remove anything you do not use.
- Business integrations: remove tools you do not recognize.
- Saved login on shared computers: turn it off.
Step 6: Turn on two-factor authentication
Under Password and security, open Two-factor authentication. Pick an authentication app if you can. A text message is fine if that is all you have. Save the recovery codes somewhere safe, not in a Facebook note.
Step 7: Check your pages for added admins
This is the part many people miss. A hacker often adds themselves as admin of a page you run. Open each page. Go to Settings → Page access. Remove anyone you did not add. Do the same for groups you manage and for your ad account in Business settings.
We have helped page owners who did everything right on their profile, then lost the page anyway. The hacker was still an admin. They came to us weeks later to rebuild the audience on a new page. Check this step first, not last.
What if the hacker changed my email or phone?
Facebook sends an email to your old address every time contact details change. That email has a link to undo the change. Search your inbox for “Facebook” from around the time of the hack. Click the link to get back to the account.
If that email is gone or expired, use the recovery form in the Help Center. It asks for a photo of your ID. The name and date of birth on the ID should match your profile. Upload it once and wait. Reviews can take a few days.
How long does recovery take?
It depends on the path.
| Path | Typical wait |
|---|---|
| Code to your email or phone | Minutes |
| Undo link in Facebook’s email | Minutes to hours |
| ID upload review | A few days, sometimes more |
There is no way to speed up an ID review. Sending it again can reset the queue. Keep your email and phone nearby and wait.
How to stop it from happening again
- Use a password you use nowhere else.
- Keep two-factor authentication on.
- Never enter your Facebook login on a link from a message, even one from a friend.
- Do not give your password to any tool or service. Famoid, for example, only needs a public page or post link.
- Review Where you’re logged in every few months.
- Keep your recovery email and phone up to date.
If you get stuck, our guide on how to contact Facebook lists the real channels and the scams to avoid. If the same thing happened on Instagram, start with our Instagram support guide.