Facebook Account Hacked? (Recovery Options)

Imagine opening Facebook and seeing posts you never wrote, messages you never sent, or, worst of all, a password error when you try to log in. Your stomach drops. You've been hacked.

You're not alone. According to recent data, 34 million hacking incidents were reported on Facebook in 2024 alone, making it the most targeted social media platform on the internet. A cyberattack occurs somewhere online every 39 seconds, and 1 in 5 social media users will face a hacking attempt this year.

The good news? Facebook has built-in recovery tools specifically for this situation, and with the right steps taken quickly, most people can reclaim their accounts. Here's everything you need to know.

How do Facebook accounts get hacked?

Before we jump to recovery, it helps to understand how hackers get in. Over 60% of Facebook account breaches involve phishing scams, fake login pages, "IS THIS YOU?" video links, and fraudulent security alerts meant to steal your credentials. Other common attack methods include:

• Credential stuffing, Hackers use username/password combinations leaked from other data breaches. (80% of hacked accounts were accessed using previously exposed login credentials.)
• Malware and keyloggers, Malicious software installed on your device silently records your keystrokes, including your Facebook password.
• Weak or reused passwords, 80% of social media breaches involve weak or reused passwords.
• Scams, Fake customer service messages, impersonation scams, and fake giveaways (which have surged 65% in recent years) trick users into handing over access directly.

Understanding the method matters because it shapes your recovery, and your prevention plan going forward (Source: Cropink).

7 signs your Facebook account has been hacked

Not every hack locks you out immediately. Watch for these warning signs:

1. You can't log in, your email or password suddenly doesn't work
2. Login alerts from unfamiliar devices or locations, especially if you've enabled Facebook's login alerts feature
3. Password reset emails you didn't request, a strong signal someone is trying to break in
4. Changes to your account settings, profile picture, name, birthday, or linked accounts altered without your knowledge
5. Messages or posts you didn't create, hackers often use compromised accounts to run scams on your contacts
6. Friend requests sent to strangers, a common behavior when an account is being used for spam
7. Suspicious apps or purchases, unauthorized third-party apps connected to your account or unexpected charges

The faster you spot these signs, the faster you can act, and speed is critical.

Recovery option 1: you can still log in (account partially compromised)

If you can still access your account but notice suspicious activity, act immediately:

Step 1: Go to facebook.com/hacked

Facebook's dedicated hacked-account portal walks you through a security check. It's the official starting point for any account compromise.

Step 2: Change your password right away

Go to Settings & Privacy → Settings → Security and Login → Change Password. Create a strong, unique password you haven't used elsewhere, a mix of uppercase, lowercase, numbers, and symbols.

Step 3: Review active sessions

Under Settings → Security and Login → Where You're Logged In, you'll see every device and location currently accessing your account. Click "Log Out of All Sessions" to kick out any unauthorized users.

Step 4: Remove unfamiliar apps

Go to Settings → Apps and Websites and revoke access for any apps you don't recognize or no longer use.

Step 5: Enable two-factor authentication (2FA)

Under Settings → Security and Login → Two-Factor Authentication, turn on 2FA. With 2FA active, even if someone has your password, they can't log in without your phone or authentication app.

Step 6: Alert your contacts

Let your friends know your account was compromised so they don't fall for any scam messages sent in your name (see Facebook Help Center).

Recovery option 2: you can't log in (password or email changed)

This is the scarier scenario, the hacker has already changed your credentials to lock you out. Don't panic. Facebook has a path for this too.

Step 1: Visit facebook.com/login/identify

Enter any email address, phone number, username, or name associated with your account. Facebook will locate your profile.

Step 2: Try "Forgot Password"

On the login screen, click "Forgot Password?" Facebook will attempt to send a recovery code to your email or phone number on file.

• If you still have access to your email or phone: Enter the code, reset your password, and you're back in.
• If the hacker changed your email or phone number too: Facebook will show you the new address they set. Look for the option that says "No longer have access to these?", this starts the identity verification process.

Step 3: Use a trusted device

If you've logged into Facebook on a phone or computer before, try recovering from that specific device. Facebook recognizes trusted devices and may grant you access to reset your password without needing a code.

Step 4: Submit a government ID

If other options fail, Facebook may ask you to verify your identity by uploading a government-issued photo ID. This is reviewed by Facebook's support team, and recovery typically takes 2-3 business days.

Step 5: Ask a trusted contact or friend to report the account

If you're completely locked out, a trusted friend can go to your profile, click the three dots (…), and select "Find Support or Report Profile" → "Hacked account". Facebook will send account recovery information to you.

Recovery option 3: your account was disabled by Facebook

Sometimes, after a hack, Facebook disables the account itself to stop the damage, or the hacker's activity triggered an automated suspension.

If your account was disabled:

• Go to facebook.com/help/contact/260749603972907
• Select "My account was hacked" and submit a request
• Follow the prompts to verify your identity

Facebook's review team will assess the situation. Expect a response within a few days, though timelines vary.

After recovery: securing your account for good

Recovering your account is only half the battle. Once you're back in, take these steps to lock things down:

Enable two-factor authentication

This is the single most effective way to stop unauthorized logins. Even if your password is stolen, a hacker can't get in without the second factor, a code sent to your phone or generated by an authenticator app like Google Authenticator or Authy.

Use a strong, unique password

Never reuse passwords across sites. A password manager (like 1Password or Bitwarden) can generate and store complex passwords for you.

Set up login alerts

Go to Settings → Security and Login → Setting Up Extra Security → Get alerts about unrecognized logins. You'll be notified the moment someone tries to access your account from a new device.

Review connected apps regularly

Third-party apps with access to your Facebook account are potential backdoors. Audit them every few months and revoke anything you don't actively use.

Be skeptical of links, even from friends

Phishing is the #1 attack method. If a friend sends you a strange link (especially "IS THIS YOU?" style videos), don't click it, their account may already be compromised.

Secure your email account too

Your email is the master key to most of your online accounts, including Facebook. Enable 2FA on your email account and use a strong, unique password there as well.

What hackers do with your account (and why speed matters)

Stolen Facebook accounts are sold on the dark web for as little as $30. Once a hacker has access, they can:

• Scam your friends and family by impersonating you
• Run fraudulent ads through your connected Facebook Business Manager
• Extract personal data (birthdate, location, contacts) to fuel identity theft, a risk for 45% of hacked users
• Lock you out permanently by disabling account recovery options over time

Every minute counts. The longer a hacker stays in your account, the more damage they can do and the harder recovery becomes. (Source: Cropink).

Quick reference: recovery by scenario

Conclusion

Being hacked feels violating and overwhelming, but it doesn't have to be permanent. Facebook provides multiple recovery pathways depending on how much access you've lost, and acting quickly significantly improves your chances of getting back in.

The best defense, though, is preventing the hack from happening in the first place. Two-factor authentication, strong passwords, and healthy skepticism about suspicious links are your most effective tools.

If your account was hacked, start at facebook.com/hacked right now, from a device you've previously used. Every second counts.

Get a free security scan with Guardio today and stay protected from phishing and account takeovers.