Recover Compromised Social Media

Someone's in your account. Maybe they changed your password, maybe they're posting things you didn't write, maybe your friends are getting weird messages from "you." It's unsettling — but most platforms have recovery processes, and the sooner you start, the better your chances.

## What this guide covers

- What to do immediately depending on your level of access - How to reclaim your account through platform recovery - How to secure it once you're back in - How to deal with the fallout

---

## Step 1: Figure Out Where You Stand

### Can you still log in?

If you can still access your account — even if things look wrong — you have an advantage. Act now before the attacker locks you out.

**Immediately:** - Change your password to something completely new - Go to your security settings and look for "Active sessions," "Logged in devices," or "Where you're logged in" — sign out of everything except your current session - Check if your email address or phone number has been changed — if so, change them back to yours - Turn on two-factor authentication (2FA) if it isn't already on

> **Need help setting up 2FA?** See our guide: *Set Up 2FA in 5 Minutes (And Why You Should)*

### Are you locked out?

If your password no longer works and you can't get in, the attacker has likely changed it. Here's what to do:

**Don't create a new account yet.** Focus on recovering the original one.

**Use the platform's account recovery process.** Every major platform has one. Go to the login page and look for "Forgot password," "Can't log in," or "Need help." You'll typically be asked to verify your identity through a recovery email, phone number, or by answering security questions.

**If the attacker changed your recovery email and phone number,** the process gets harder but isn't impossible. Most platforms have a secondary identity verification process — sometimes involving uploading a photo of your ID or answering questions about your account history. Start this process now because it can take time.

---

## Step 2: Platform-Specific Recovery

Each platform handles compromised accounts slightly differently, but they all have dedicated processes.

**General approach for any platform:**

Go directly to the platform's website or app — type the address yourself, don't click links from emails or messages about your account. Look for their help or support section and search for "hacked account" or "compromised account." Most have a specific flow for this exact situation.

You'll typically need to prove you're the real owner. This might involve:

- Receiving a code to your original email or phone number - Identifying friends from photos (some platforms use this) - Providing a government ID - Answering questions about your account activity

**Be patient but persistent.** Automated recovery can work in minutes. But if it escalates to manual review, it might take days or even weeks. Keep checking for updates and follow up if you don't hear back.

---

## Step 3: Secure Your Account Once You're Back In

Getting back in is only half the job. Now you need to make sure this doesn't happen again.

### Change your password

Use something long, unique, and not used on any other account. A password manager can help you generate and remember it.

### Turn on two-factor authentication

This is non-negotiable. With 2FA on, even if someone gets your password again, they can't get in without the second verification step.

### Review your security settings thoroughly

Go through everything:

- **Connected apps and third-party access:** Remove anything you don't recognise. Hackers sometimes connect apps to maintain access even after you change your password. - **Login activity:** Look at recent logins and note any locations or devices that aren't yours. - **Recovery email and phone:** Make sure these are yours and up to date. - **Email forwarding rules (if applicable):** Some attackers set up email forwarding to keep receiving your notifications.

### Check your content

Look through your recent posts, messages, and stories. The attacker may have posted spam, phishing links, or inappropriate content from your account. Delete anything that isn't yours.

Also check your DMs — they may have messaged your contacts pretending to be you, possibly trying to scam them or spread the compromise.

---

## Step 4: Deal With the Fallout

### Let your contacts know

Post a brief update or message close friends and family directly: "My account was hacked. If you received any weird messages from me recently, don't click any links. Everything is sorted now."

This isn't embarrassing — it's responsible. It protects the people in your network from falling for whatever the attacker sent.

### Check your other accounts

If you used the same password on other platforms (or the same email without 2FA), check those accounts too. Attackers often use one compromised account as a stepping stone to others.

### Monitor for a few weeks

Keep an eye on your account for any unusual activity — new followers you didn't approve, messages you didn't send, settings that changed. Set up login alerts if the platform offers them so you'll be notified immediately if someone signs in from a new device.

---

## If You Can't Recover the Account

Sometimes, despite your best efforts, the platform's recovery process doesn't work — especially if the attacker has completely taken over the email and phone number associated with the account.

If you've exhausted the platform's recovery options, consider reporting the account as impersonation or as compromised. Most platforms allow friends or family to report on your behalf, which can lead to the account being frozen or removed.

If the compromised account is being used to scam or harass others, report it to your local cyber authority as well.

> **Find reporting options on our [Resources page].**

---

## How Did This Happen?

Common ways social media accounts get compromised:

- You reused a password that was exposed in a data breach - You clicked a phishing link (the "Is this you in this video?" type of message) - You logged in on a device or network that wasn't secure - A third-party app you connected to your account had a security flaw - Someone close to you had access to your password

Understanding the cause helps you prevent it next time.

> **Want to learn more about phishing?** Read our guide: *How Phishing Scams Actually Work*

### This happens to millions of people

Getting your social media hacked feels personal, but it's incredibly common. It doesn't mean you did something wrong — these attacks are designed to catch people off guard.

> **Read how others handled it on our [Stories page]. You're not alone.**

---

*This guide is part of the StillOnline.org recovery series. Written in plain language for real people dealing with real situations.*