If your Facebook account has been hacked, you may feel anxious and unsure about what to do next. The good news is that you can regain control quickly by following clear steps to secure your profile, remove unauthorized changes, and protect your personal information from further exposure.
This guide shows exactly what to do when your Facebook account has been compromised, from immediate recovery actions to long-term security habits that reduce future risk.
| Priority | Action | Tool or Location | Expected Outcome |
|---|---|---|---|
| 1 | Use Facebook's official recovery process | facebook.com/recover | Restore legitimate access and lock out unauthorized users |
| 2 | Disconnect unknown devices and sessions | Settings & Privacy → Settings → Security and Login | Remove hacker access from active sessions |
| 3 | Enable two-factor authentication | Security and Login → Two-Factor Authentication | Add a second verification layer for logins |
| 4 | Audit app permissions and remove suspicious apps | Settings & Privacy → Settings → Apps and Websites | Prevent apps from accessing your data without consent |
| 5 | Review and remove unwanted posts or changes | Your Activity Log | Clean up unauthorized content and restore your timeline |
Securing Your Compromised Profile
When you discover that your Facebook account has been hacked, your first priority is to secure the account before the attacker can do more damage. Start by changing your password to a strong, unique combination that you do not use anywhere else.
Immediately review your recent activity in the Security and Login section of Facebook settings. Look for unfamiliar devices, locations, or browsers and use the "Log Out" option to terminate those sessions. This step is critical to remove the hacker’s access while you regain full control.
Recovering Access and Preventing Future Attacks
Using Facebook's recovery tools can help you regain access if the hacker has removed your ability to sign in. Provide a current, active email address or phone number and follow the prompts to verify your identity.
After recovery, enable two-factor authentication so that anyone attempting to log in needs both your password and a second verification method, such as a text message code or authentication app notification.
Auditing Apps and Permissions
Hackers often use third-party apps to maintain access to a hacked Facebook account without appearing in your active sessions. Review every app and website connected to Facebook and revoke permissions for any that you do not recognize or use.
Pay special attention to quiz apps, games, and survey tools that may have requested broad permissions. Removing these apps limits the pathways a hacker can use to compromise your account again.
Reviewing and Cleaning Up Unauthorized Activity
Even after securing a hacked Facebook account, you must check for changes made while your profile was under someone else's control. Open Your Activity Log to review posts, comments, likes, and profile edits made during the compromised period.
Remove any posts, tags, or changes that you did not authorize, and restore your profile photo and bio information to ensure that your timeline accurately reflects your current preferences and identity.
Long-Term Security Habits for Facebook Users
Protecting your account after a hack requires ongoing vigilance and consistent security practices that make future compromise much less likely.
- Use a strong, unique password and update it periodically
- Enable two-factor authentication on every login attempt
- Review active sessions and connected apps at least once a month
- Be cautious about clicking links or installing quizzes and games
- Keep your recovery email and phone number current and secure
FAQ
Reader questions
How can I confirm whether my Facebook account has truly been hacked?
Look for signs such as posts you did not create, messages you did not send, unfamiliar login alerts, or changes to your profile information that you did not make. If you can no longer log in with your usual credentials or receive alerts about unknown logins, your account has likely been compromised.
What should I do if I cannot regain access to my email or phone linked to Facebook?
Use Facebook's account recovery form to provide alternative verification details, such as older email addresses, full name, birth date, and recent login locations. Be as detailed and accurate as possible to increase the chances of successfully restoring access.
Can a hacked Facebook account affect other apps and services I use?
Yes, if you reused passwords or connected Facebook login to other apps, those services may also be at risk. Change passwords for critical accounts, enable two-factor authentication wherever available, and review connected app permissions to block unauthorized access.
Is it necessary to contact Facebook support after regaining control of my account?
If suspicious activity continues, you cannot remove unfamiliar devices, or you suspect financial information was exposed, contact Facebook support for additional assistance. Provide screenshots and details about the issue to help them investigate and secure your account.