My Facebook Was Hacked — What Should I Do?
Discovering your Facebook was hacked is upsetting — but the steps below work, and the sooner you act, the better. Most accounts are recoverable within 30 minutes if you start now. Don't pay anyone who calls offering 'Facebook hack support' — those are all scams.
If your Facebook was hacked, act in this order: (1) go to facebook.com/hacked and click 'My Account Is Compromised', (2) log in with the password the hacker may not have changed yet, (3) Facebook walks you through securing the account, (4) review recent activity and remove anything you didn't do, (5) change the password and turn on two-factor authentication. If the hacker already changed your password, use facebook.com/login/identify and follow the recovery process. Never call any phone number from a Facebook search result — Meta has no phone support.
Step-by-step practice mode
Click through each step to practice. The screens look like the real Facebook app — but nothing here changes anything in your real account or device.
Step 1 — Go to facebook.com/hacked
This is Facebook's official 'compromised account' page
My Account is Compromised
We'll help you secure your account.
Click 'My Account Is Compromised'
Step-by-step instructions
- 1
Go to facebook.com/hacked
Type facebook.com/hacked into your browser's address bar. This goes to Facebook's official 'My Account Is Compromised' page. Click the blue button that says 'My Account Is Compromised'.
- 2
Try logging in with your most recent password
Facebook asks for your email/phone and password. Try the password you remember — many hackers post fake messages but don't immediately change the password. If it works, you're racing the hacker, so do the rest fast.
⚠ Important: If your password DOESN'T work, the hacker changed it. Skip to step 7 (special hacked recovery). - 3
Review login activity and sign out unrecognized sessions
Facebook shows 'Where you're logged in'. Click 'See more' and look at the list. Any device, location, or city you don't recognize is the hacker. Click the three dots next to it and pick 'Log out'. Do this for every unfamiliar entry.
- 4
Review recent posts, friend requests, and messages
Go to your profile and scroll your timeline. Delete any post you didn't make. Go to Friends → Friend Requests sent and cancel any you didn't send. Go to Messenger and look at recently sent messages — apologize to friends if the hacker sent them spam links.
⚠ Important: If the hacker sent fake 'I'm in trouble, send me money' messages, your friends may have lost real money. Tell them in a public post that your account was hacked so they don't fall for it. - 5
Change your password
Go to Settings → Password and security → Change password. Pick a brand new password (not one you've used before — the hacker has the old one). Use 12+ characters with letters, numbers, and a symbol. Click Save.
- 6
Turn on two-factor authentication
Settings → Password and security → Use two-factor authentication. Pick 'Authentication app' (more secure than text message — but text message is OK if you're not comfortable installing apps). Follow the prompts. Save the recovery codes Facebook gives you on paper.
⚠ Important: Two-factor stops 99% of hackers even if they steal your password later. Do not skip this step. - 7
If the hacker changed your password — use facebook.com/login/identify
If the password no longer works, you can't log in to use the steps above. Go to facebook.com/login/identify, identify your account, and follow recovery. If your email was also changed by the hacker, check your old email inbox for a 'Your email was changed' message from Facebook — there's a 'Secure your account' link valid for 30 days. Click that.
- 8
Tell your friends and family in a public post
Once you're back in, post on your timeline: 'My Facebook was hacked yesterday. If you got any odd messages from me asking for money or clicks, please ignore them — those weren't from me.' This stops the hacker from continuing to scam your friends.
What if it's not working?
Problem: I can't log in even with the right password
Likely cause: Hacker already changed the password (and possibly email).
How to fix: Go to facebook.com/login/identify and identify your account. Click 'No longer have access to these?' to use trusted contacts or upload an ID. Also check your email inbox for a Facebook 'Your email was changed' message — there's a special 'Secure your account' link inside that bypasses the hacker's changes (valid 30 days).
Problem: My friends are getting scam messages from my account but I can still log in
Likely cause: Hacker has either an active session or has connected a malicious app to your account.
How to fix: Settings → Apps and Websites → look for any apps you didn't install → click Remove. Then Settings → Where you're logged in → log out all devices except your current one. Change password.
Problem: Facebook says my account is 'temporarily locked'
Likely cause: Facebook auto-detected suspicious activity and locked the account to protect you.
How to fix: Follow the on-screen prompts — usually identify yourself by typing names of friends shown in photos, or upload an ID. The lock auto-clears once you complete verification.
Problem: I deleted the 'email changed' notification by mistake
Likely cause: Many seniors delete these as 'spam' before realizing they're real.
How to fix: Check your email's Trash or Deleted folder — the message is recoverable for up to 30 days in most email services. The 'Secure your account' link in it is the fastest way back in.
Frequently asked questions
How can I tell if my Facebook was actually hacked?
Common signs: friends receive messages you didn't send, your name or birthday changed, posts appear that you didn't make, you see logins from cities you've never been to, you get an email from Facebook saying 'Your email was changed' or 'New device login' that you didn't do. If even one of these is true, treat it as hacked and follow this guide right away.
Should I pay someone advertising 'Facebook hack recovery service'?
Absolutely not — every single one is a scam. They cannot bypass Meta's verification any more than you can. They take your money, often ask for your password (then steal more), and disappear. Real Facebook recovery is FREE through facebook.com/hacked. If you need help navigating it, call us free at 347-953-1531.
How did the hacker get my Facebook password?
Most common ways: (1) you clicked a phishing link in an email or message that looked like Facebook but stole your password, (2) you used the same password on another website that got breached, (3) malware on your computer recorded what you typed. After recovery, scan your computer for viruses and never reuse passwords.
Can the hacker still see my private messages even after I change my password?
No — once you change the password and sign out all devices, the hacker is locked out. They keep whatever they already read or screenshot, but they can't see new messages. Review the 'Where you're logged in' list carefully and log out anything unfamiliar to be sure.
Should I delete my Facebook and start over?
Usually no. Recovery is almost always faster than starting over and rebuilding your friends list, photo history, and group memberships. Only delete if Meta refuses recovery after multiple ID submissions over several weeks. See our 'Recover My Facebook Account' guide before considering deletion.
Will Facebook tell my friends my account was hacked?
Not automatically — that's why you should post about it yourself. Facebook may add a small 'this account was recently recovered' note to your profile, but it's not obvious. Tell your friends in a clear post so they don't fall for any scam messages the hacker sent before you locked the account.
What if the hacker stole money from people who messaged me back?
Tell those friends to report the loss to (a) their bank for a fraud claim, (b) the FTC at reportfraud.ftc.gov, and (c) the FBI's Internet Crime Center at ic3.gov. The bank may be able to reverse charges if the friend acts within 60 days. Your friends were victims, not careless — sophisticated scams fool many people.
How do I prevent this from happening again?
Three steps: (1) turn on two-factor authentication on Facebook (Settings → Password and Security → Use two-factor authentication), (2) use a different password for Facebook than for any other site, (3) never click links in messages — even from friends — without checking with them first. With two-factor on, even a stolen password isn't enough for hackers to get in.
Related guides
Still stuck? Call a real person.
We answer in under 15 minutes. We never ask for your password. Help is free for under-15-minute calls.
📞 347-953-1531