If your Facebook account has been hacked, you may feel anxious and unsure about what to do next. The good news is that you can regain control quickly by following a clear sequence of steps focused on securing your account, removing unauthorized changes, and preventing future compromises.
This guide walks you through practical actions, recovery paths, and long-term protection strategies. Treat each step as an immediate action that reduces risk and restores your digital identity.
| Priority | Action | Purpose | Timeline |
|---|---|---|---|
| High | Secure the account now | Stop the hacker from accessing data | Immediately |
| High | Report the compromise | Request official help and rollback changes | Within 24 hours |
| Medium | Audit account activity | Review logins, messages, and settings | Within 48 hours |
| Medium | Notify contacts | Reduce phishing and malware spread | As soon as suspicious messages are detected |
| Low | Strengthen long-term defenses | Lower the risk of repeated compromises | Ongoing |
Secure Your Account Immediately
Change Password and Enable Strong Authentication
Start by changing your password to a unique, strong one that includes letters, numbers, and symbols. Then enable two-factor authentication using an authenticator app or hardware key, which is more secure than SMS-based options.
Review Active Sessions and Trusted Contacts
Visit your security and login settings to log out all unknown devices. Confirm that trusted contacts and recovery options reflect your current, verified information, removing any suspicious entries added by an attacker.
Assess and Reverse Unauthorized Changes
Check Profile, Email, and Phone Settings
Examine your profile details, contact email, and phone number to ensure they have not been altered. If changes appear, revert them to your verified information and remove any unfamiliar secondary contacts.
Audit Recent Posts, Messages, and App Permissions
Scan recent posts and direct messages for content you did not create, such as spam links or political statements. Also review app permissions and remove any apps or integrations you do not recognize or use.
Recover from Facebook’s Systems
Use Official Reporting and Recovery Tools
Submit a report through Facebook’s hacked account form and follow their guided recovery steps. This may include verifying your identity, resetting compromised passwords, and restoring recent account activity to a safe state.
Monitor Restoration Progress
After initiating recovery, watch for confirmation that unauthorized posts have been removed and that your account shows as secure. Continue checking login alerts and security notifications for several days.
Protect Your Email and Devices
Secure the Email Linked to Your Facebook
Ensure the email address used for Facebook recovery is locked down with its own strong password and two-factor authentication, because compromising email is a common path to hijacking Facebook accounts.
Update Devices and Remove Malware
Run updated anti-malware scans on your computers and phones, install operating system and application patches, and avoid saving passwords on shared or public devices.
Long-Term Account Security Practices
- Use a unique, strong password and a reputable password manager
- Enable two-factor authentication with an authenticator app or security key
- Review login alerts and active sessions regularly
- Keep software, browsers, and operating systems up to date
- Be cautious about clicking links or granting app permissions
FAQ
Reader questions
How can I confirm whether my Facebook account has actually been hacked?
Look for signs such as unknown posts, messages you did not send, changes to your profile or email, or alerts about logins from unfamiliar locations. Facebook’s security notifications and recent activity log are reliable indicators of compromise.
What should I do if I can no longer access my account to start recovery?
Use Facebook’s hacked account recovery flow, which may involve verifying identity through a secondary email, phone number, or trusted contacts, and following step-by-step prompts to regain control even when you are currently locked out.
Will my posts automatically be removed after I report a hack?
Facebook generally removes spam or abusive content posted by an attacker as part of the recovery process, but you should still review your timeline and manually delete any remaining suspicious posts or comments. Yes, privately message trusted contacts to warn them about possible phishing or malware links, and advise them to ignore or report any suspicious messages that appear to come from your account.