Facebook Account Hacked: Step-by-Step Recovery Guide

Act Fast — Time Matters

When a Facebook account is compromised, the attacker’s first move is usually to change the email and phone number associated with the account, cutting off standard recovery. The sooner you start the process below, the better your chances of recovering before that change takes effect.

Step 1: Use Facebook’s Hacked Account Tool

1. Go to facebook.com/hacked — this is Facebook’s dedicated recovery portal.
2. Click My Account Is Compromised.
3. Enter your old email address or phone number and follow the prompts. Facebook will try to identify your account even if the attacker changed your credentials.

Step 2: Request a Login Code to an Old Email or Phone

1. On the login screen, click Forgot password?
2. Enter your old email or phone. Even if the attacker changed the primary contact, Facebook sends recovery codes to previously verified contacts for up to 72 hours after the change.
3. If you get the code, immediately change your password to something long and unique.

Step 3: Use Trusted Contacts (If Set Up)

1. On the login screen → Forgot password? → Get more help → Use my trusted contacts.
2. Facebook will send recovery codes to 3–5 friends you previously designated as trusted contacts.
3. Collect the codes from your friends and enter them to regain access.

Step 4: Submit a Government ID

1. If all else fails, go to facebook.com/id and submit a photo ID (passport, driver’s license).
2. Facebook will verify your identity against the name on the account and restore access, typically within 1–3 business days.
3. This is the most reliable last-resort option when all other recovery paths are closed.

After Recovery: Secure Your Account

1. Change your password immediately — use a unique password not used on any other site.
2. Enable two-factor authentication: Settings → Security and Login → Two-Factor Authentication.
3. Review and revoke all active login sessions under Where You’re Logged In.
4. Remove any apps you don’t recognize under Settings → Apps and Websites.

Related Guides

If your Twitter/X was also compromised, see our Twitter account suspended recovery guide. For Instagram, our Instagram login loop guide covers session and security fixes.