Discovering your social media account has been compromised triggers immediate panic. Your personal messages, photos, and connections suddenly belong to someone else.
Hackers exploit weak passwords, phishing attacks, or third-party app vulnerabilities to gain unauthorized access. Once inside, they can change your password, lock you out, post malicious content, or scam your followers. Most platforms have built recovery systems that, when navigated correctly, can restore your access within hours or days.
This guide walks through the specific recovery processes for major platforms and provides actionable strategies to reclaim control of your compromised accounts.
Warning Signs Before Complete Lockout
Many hacks announce themselves gradually. You might receive emails about login attempts from unfamiliar locations or devices. Password reset requests you didn’t initiate signal someone probing your security. Friends messaging about strange posts or direct messages you never sent indicate unauthorized access.
Some platforms send notifications when a new device logs into your account. If you see activity from an iPhone in Romania while you’re using an Android in California, act immediately. The faster you respond, the easier recovery becomes.
Check your email inbox and spam folder for security alerts. Hackers often delete these messages to cover their tracks, but your email provider typically retains them for several days. These notifications contain information about when the breach occurred and what actions the intruder took.
Facebook Account Recovery
Facebook provides a dedicated recovery portal at facebook.com/hacked. This page walks you through identification verification without requiring your password. You’ll need to provide either the email address or phone number associated with your account.
If the hacker changed your contact information, click “No longer have access to these?” Facebook will ask for any email address where they can reach you. You’ll receive a recovery code at this new address. Enter the code, then Facebook presents several profile pictures from your account. Select the ones that are actually yours to prove your identity.
For accounts connected to a phone number, Facebook sends a six-digit code via SMS. Enter this code within ten minutes before it expires. If you’ve set up Trusted Contacts—a feature that allows designated friends to help recover your account—you can request special codes from three of these people. Each friend receives a unique URL to access their portion of the recovery code.
After regaining access, review your security settings. Navigate to Settings & Privacy, then Security and Login. Check for unrecognized active sessions and click “Log Out Of All Sessions” to kick out the intruder from all devices. Enable two-factor authentication through an authenticator app rather than SMS, as phone numbers can be hijacked through SIM swapping attacks.
Instagram’s Identity Verification
Instagram’s recovery process emphasizes identity verification through selfie videos. When you can’t log in, tap “Forgot password?” on the login screen. Enter your username, email, or phone number. If the hacker changed these details, tap “Need more help?” at the bottom.
Instagram may ask you to record a video selfie turning your head in different directions. This biometric verification compares your movements against previously posted photos to confirm you’re the legitimate owner. The process takes about 24 hours for review.
Alternatively, Instagram sends a six-digit code to the email or phone number originally linked to your account. If you’ve lost access to these, select “Send a login link” to receive a recovery URL. This link expires after one hour, so check your email immediately.
For business or creator accounts, Instagram offers additional verification options. You can submit a form including your full name as it appears on government ID, your email address, and the phone number linked to the account. Attach a photo of your official identification—driver’s license, passport, or national ID card.
Once recovered, review your account’s Linked Accounts section. Hackers sometimes connect your Instagram to their Facebook profile or other services to maintain access even after you change passwords. Remove all unfamiliar connections and revoke permissions for third-party apps you don’t recognize.
Twitter’s Recovery Process
Twitter requires you to remember either your username, email address, or phone number to begin recovery. Visit twitter.com and click “Sign in,” then “Forgot password?” Enter your account identifier and Twitter sends a reset code to your registered email.
If the hacker modified your email, Twitter’s system attempts to verify your identity through previous account activity. You’ll answer questions about when you created the account, what devices you typically use, and recent tweets or direct messages you sent. Be as specific as possible—vague answers delay recovery.
Twitter’s support team responds through their help form at help.twitter.com/forms. Select “Account Access” then “Hacked Account” from the dropdown menus. Provide your account name, description of the problem, and any evidence of ownership such as the email address you originally used for registration.
Response times vary from several hours to multiple days depending on case complexity. Check the email address you provided in the help form regularly. Twitter doesn’t always send follow-up questions through their platform—they communicate primarily through email during recovery.
After restoration, visit Settings and Privacy, then Security and Account Access. Review Apps and Sessions to see all active logins. Revoke access for unfamiliar applications, especially those requesting permission to tweet on your behalf or access direct messages.
LinkedIn Recovery
Begin recovery at linkedin.com/checkpoint/rp/request-password-reset. Enter your email address or phone number.
LinkedIn sends a six-digit verification code valid for ten minutes. If you don’t receive it, check your spam folder and ensure your email provider isn’t blocking LinkedIn’s domain. For compromised email access, select “Verify by text instead” to receive the code via SMS.
When both email and phone number have been changed, click “I don’t have access to this email” on the password reset page. LinkedIn presents a form requesting your first name, last name, and previous email addresses associated with the account. They cross-reference this information with their records to verify identity.
LinkedIn may require additional verification through uploaded identification. The document review process typically completes within three business days. After access restoration, navigate to Settings & Privacy, then Sign in & Security. Enable two-step verification and review where your account is currently logged in.
TikTok Recovery Protocol
Report compromised accounts through the app if possible. Open TikTok, go to Profile, tap the three lines for Settings and Privacy, then Report a Problem. Select Account and Profile, then Other, and explain your account has been hacked.
For complete lockouts, visit support.tiktok.com. Click on Account and Settings, then Trouble Logging In. Fill out the form with your username, registered email, and phone number. TikTok’s support team typically responds within 24-48 hours through email.
TikTok may ask you to record a verification video holding up a piece of paper with a specific code they provide. This prevents bots or unauthorized users from claiming your account. Film the video in good lighting with your face clearly visible, holding the code paper near your face.
Once recovered, check your account’s Privacy settings. Hackers sometimes enable message requests from everyone or make your account public to spread spam more effectively. Return these settings to your preferred privacy levels and review any unfamiliar content posted during the breach.
Google Account Recovery
A compromised Google account affects Gmail, YouTube, Google Drive, and Android device access. Recovery begins at accounts.google.com/signin/recovery.
Google asks for the last password you remember. Even if it’s several passwords old, enter it—Google’s system recognizes previously used credentials as proof of legitimate ownership. If you can’t remember any passwords, click “Try another way.”
Google sends a verification code to your recovery email or phone number. For accounts without recovery options configured, Google presents security questions or asks when you created the account. If you’ve used Android devices logged into this account, Google may send a prompt to your phone asking you to confirm the recovery attempt.
The Account Recovery Helper uses machine learning to assess your answers. Respond from a familiar location and device if possible—Google recognizes your typical login patterns and considers this during verification. Recovery from an unknown IP address or device raises additional security flags.
After regaining access, visit myaccount.google.com/security. Remove unrecognized recovery emails and phone numbers the hacker may have added. Review third-party apps with account access under “Third-party apps with account access” and revoke permissions for anything suspicious. Enable Google’s Advanced Protection Program if you’re frequently targeted—this adds hardware security key requirements for all logins.
Snapchat Recovery
Snapchat accounts often lack recovery emails or phone numbers, making restoration difficult. Visit accounts.snapchat.com/accounts/password_reset. Enter your username or email address. Snapchat sends a reset link to your registered email.
If the hacker changed your email, tap “Need help?” then “I don’t have access to my email/phone number.” Snapchat asks for any email where they can contact you. They’ll send follow-up instructions, but response times can extend beyond a week.
For accounts connected to phone numbers, use the “Send via SMS” option. If you’ve enabled two-factor authentication through an authenticator app before the hack, you can use backup codes saved during initial setup to bypass the hijacked email or phone number.
Snapchat support responds slowly compared to other platforms. After submitting a recovery request, avoid creating a new account with the same information—this confuses their system and delays recovery. Check your provided email address daily for updates.
Document and Protect
Screenshot every step of the recovery process. Capture confirmation emails, verification codes, and support ticket numbers. This documentation proves ownership if you need to escalate your case or if the hacker attempts to reclaim the account.
Use a password manager to store unique, complex passwords for each platform. Services like Bitwarden or 1Password generate random 20-character passwords impossible for humans to remember but simple for software to manage. This prevents password reuse—if one account is breached, others remain secure.
Enable multi-factor authentication on every account that offers it. Authentication apps like Google Authenticator or Authy generate time-based codes that expire every 30 seconds. Even if someone steals your password, they can’t log in without the second factor.
Review your accounts quarterly for suspicious activity. Most platforms show login history, including device types and locations. Set calendar reminders to check these logs every three months.
Add recovery emails, verify phone numbers, and save backup codes immediately after creating new accounts. These preventive steps save hours of frustration when facing a compromised account.
