Losing access to a social media account can be stressful, especially when you cannot tell whether the account was hacked, temporarily locked, or simply affected by a forgotten password.
The good news is that losing access does not always mean losing the account permanently. The safest approach is to identify what happened, use the platform’s official recovery process, secure the email account connected to it, and avoid anyone claiming they can recover the account for you in exchange for your password or verification code.
Check why you cannot access the account
Before trying several recovery methods, look carefully at the message shown when you attempt to sign in.
You may be dealing with a forgotten password if the platform simply says your login details are incorrect.
The account may have been hacked if:
- Your password suddenly stopped working
- Your email address or phone number was changed
- Posts appeared that you did not create
- Messages were sent from your account without your knowledge
- You receive security alerts about unfamiliar logins
- Your profile information has changed
- You were suddenly logged out of devices where you were previously signed in
An account may be temporarily locked because of unusual activity, repeated unsuccessful login attempts or a security check.
Knowing which situation you are dealing with helps you choose the correct recovery option.
Try the official password recovery option
If you still have access to the email address or phone number connected to the account, start with the platform’s normal password recovery process.
Look for options such as:
Forgot password?
Can’t log in?
Get help signing in
Enter your username, email address or phone number when requested.
The platform may send a password-reset link or verification code to one of your registered recovery methods.
Use only the official website or application. Do not search for random people offering account recovery services.
Check your email for security alerts
If you believe someone changed your account information, search your email inbox for recent security messages from the social media platform.
Look for notifications about:
- Password changes
- Email address changes
- Phone number changes
- New login attempts
- New devices
- Security settings changes
Some services provide a way to reverse an unauthorized account change through an official security notification.
However, be careful with emails that look suspicious. Instead of clicking an unfamiliar link, open the social media application or official website yourself and begin the recovery process there.
Secure your email account first
Your email account is extremely important during social media recovery.
If someone has access to your email, they may be able to request another password reset even after you recover the social media account.
If you believe your email account may also be compromised, change its password first.
Use a password that is different from the one used on your social media account. Also review the email account’s recovery options, logged-in devices and security settings.
Recover a Facebook account
If your Facebook account has been hacked, use Facebook’s official account recovery tools rather than contacting an unofficial recovery service.
Facebook provides a hacked-account recovery process for people who believe someone else has gained access to their account.
If you can still access the account, immediately change the password and review your security settings.
If you cannot access it, use Facebook’s official account recovery process and follow the verification instructions provided.
Do not give your Facebook password or security codes to someone who claims to work for Facebook.
Recover an Instagram account
If you cannot access your Instagram account, use Instagram’s official login recovery options.
Start from the Instagram application or official website and select the appropriate option for forgotten login details or an account that has been compromised.
If your email address was changed without your permission, check your original email account for a security notification from Instagram.
Follow only the recovery instructions provided by Instagram.
Be especially careful with people who contact you privately claiming to be Instagram employees or security specialists.
Recover an X account
If your X account has been compromised and you can still sign in, change your password immediately.
Then review the account’s email address, connected applications and other security settings.
X recommends revoking access for unfamiliar third-party applications after an account compromise.
If you cannot regain access through normal login recovery, use X’s official support process for compromised accounts.
If your account is temporarily locked, follow the verification instructions shown by X rather than repeatedly attempting different passwords.
What to do if the hacker changed your email address
This is one of the more serious account-recovery situations, but you should still start with the platform’s official recovery system.
Search the original email account for notifications saying that the email address associated with your social media account was changed.
If the platform provides an option to reverse the change, follow its instructions.
If that option is no longer available, use the platform’s official hacked-account recovery form or support process.
You may be asked to verify ownership through information associated with the account.
Do not share verification codes
One of the most important rules during account recovery is to keep verification codes private.
A scammer may contact you and say:
“I can recover your account. Just send me the code you received.”
Do not do this.
A one-time code can sometimes be exactly what someone needs to complete a login or password reset.
The same applies to:
- Passwords
- Recovery codes
- Email passwords
- Security keys
- Login links
- Screenshots of security messages
Keep these details private.
Remove unfamiliar connected applications
After recovering your account, look through the applications and services that have access to it.
Remove anything you do not recognize.
Third-party applications can sometimes retain access to an account even after the password has been changed.
Only reconnect services that you recognize and genuinely need.
Change passwords that were reused elsewhere
If you used the same password on several websites, change those passwords too.
For example, using one password for your email, social media and another website creates a security problem because one compromised service can put the others at risk.
Use a different strong password for each important account.
A password manager can make this easier by generating and storing unique passwords.
Turn on two-factor authentication
Two-factor authentication adds another security step to your account.
Depending on the platform, this may use an authentication app, security key, text message or another supported method.
After recovering the account, enable two-factor authentication if the service offers it.
This can make it harder for someone to access the account even if they somehow obtain your password.
Review recent account activity
Once you are back inside the account, look for anything the attacker may have changed.
Check:
- Profile information
- Email address
- Phone number
- Recent posts
- Direct messages
- Connected applications
- Logged-in devices
- Security settings
- Recovery options
Remove anything you do not recognize.
If unauthorized messages were sent to friends or followers, consider warning them not to click suspicious links.
What if the account is temporarily locked?
Do not assume that a locked account has been hacked.
Some platforms temporarily restrict access when they detect unusual activity or repeated unsuccessful login attempts.
Read the exact instructions displayed during login.
The platform may ask you to:
- Verify your email
- Confirm your phone number
- Reset your password
- Complete a security check
- Wait for a temporary restriction to expire
- Submit an appeal
Follow the instructions provided by the platform rather than repeatedly trying random login details.
What if you no longer have access to the email or phone number?
Recovery becomes more difficult when all registered recovery methods are unavailable.
Use the platform’s official account recovery or support process and provide the information it requests to establish ownership.
Do not attempt to bypass the platform’s identity or security checks.
If the platform cannot verify that you are the legitimate account owner, recovery options may be limited.
Check your devices for security problems
If you recover your account but someone keeps accessing it, changing the password alone may not solve the problem.
Update your phone, computer and browser.
Remove applications or browser extensions you do not recognize.
Run the security tools available on your device and make sure your operating system is up to date.
If the problem continues, avoid signing into important accounts from a device you suspect may be compromised until it has been checked.
Beware of account-recovery scams
Account recovery scams often target people immediately after they lose access.
Someone may promise:
- Guaranteed recovery
- Direct access to the platform
- A special employee connection
- Fast recovery for a fee
Be skeptical of these claims.
Never give your password or one-time verification code to an individual who contacts you privately.
Use the social media company’s official recovery and support systems instead.
Final thoughts
If your social media account has been hacked or locked, do not panic and do not give your login information to strangers.
Start with the platform’s official password recovery system. If you suspect a hack, check your email for security notifications, secure your email account, change reused passwords and remove unfamiliar connected applications.
After regaining access, enable two-factor authentication and review your account activity.
The safest recovery method is always the one provided directly by the social media platform.