To recover a hacked Instagram account, go to instagram.com/hacked and follow the prompts. If you can still log in, change your password immediately. If you can’t, use “Forgot password,” check your email for a message from Instagram to reverse any changes, or verify your identity with a video selfie.
Speed matters. The sooner you act, the more likely Instagram can restore your account before the hacker changes your email, phone number, or username.
Quick Recovery Checklist
- Check your email for a security message from Instagram and tap the “secure your account” or “revert this change” link.
- Request a password reset from the login screen.
- Go to instagram.com/hacked if your email or phone number was changed.
- Verify your identity with a video selfie or by asking trusted friends to confirm it.
- Once you’re back in, change your passwords, turn on two-factor authentication, and remove unknown devices and apps.
How to Tell If Your Instagram Account Was Hacked
Look for these warning signs:
- Your password or email suddenly stops working.
- You receive emails about login attempts or changes you didn’t make.
- Posts, Stories, or DMs appear that you didn’t send.
- Your bio, username, or profile photo has changed.
- You see unfamiliar devices in your login activity.
- Followers report strange messages or links coming from your account.
Any one of these is enough reason to act. Don’t wait for a second sign.
Step 1: Check Your Email for a Message From Instagram
Instagram sends an email when your login details change. Search your inbox and spam folder for messages from Instagram about an email, phone, or password change.
If you find one, use the link in that message to reverse the change and secure your account. Only tap links inside emails that arrive at the address you registered, and confirm the sender is Instagram before you click. Phishing emails imitating Instagram are common.
Step 2: Reset Your Password
If the hacker only changed your password, the reset is quick:
- Open the Instagram app or website and tap Forgot password?
- Enter your username, email, or phone number.
- Choose to receive a login link or code by email or SMS.
- Follow the link and create a new password.
Request the link only from the official app or website. Never from a message someone sends you. Instagram’s own hacked account guidance walks through this flow.
Step 3: Use Instagram’s Hacked Account Page
If the hacker changed your email and phone number, the reset link will go to them, not you. In that case, visit instagram.com/hacked on your phone or computer.
Select the option that matches your situation, such as “I think my account was hacked.” Then follow the steps for your account. Try to use a device where you were previously logged in, since Instagram treats familiar devices and locations as a trust signal.
Step 4: Verify Your Identity
If Instagram can’t confirm you own the account, it may ask you to prove it. Depending on your situation, that can include:
- A video selfie. You record a short video of your face from several angles. Instagram uses it only to confirm identity, and Meta states it deletes the video after review.
- Trusted friends. Instagram may let you ask friends to confirm your identity so you can regain access.
- Account details. You may be asked for the email or phone number used at sign-up, or details about the account.
Answer with accurate information and use the same email address throughout the process. Submitting multiple conflicting requests can slow things down.
Step 5: Secure Your Account After Recovery
Getting back in is only half the job. Lock the door before the hacker returns.
- Change your password. Use a unique password of at least 14 characters that you don’t use anywhere else. A password manager makes this easy.
- Turn on two-factor authentication (2FA). Go to Settings → Accounts Center → Password and security → Two-factor authentication. Choose an authenticator app rather than SMS when possible. The Cybersecurity and Infrastructure Security Agency (CISA) recommends multifactor authentication on all key accounts.
- Log out of unknown devices. Review your login activity and remove sessions you don’t recognize.
- Remove suspicious third-party apps. Revoke access for any app you don’t remember authorizing.
- Confirm your contact details. Make sure your email and phone number are yours.
- Secure your email account. If the hacker controls your email, they can undo every fix. Change that password and enable 2FA there first.
- Change reused passwords. If you used the same password elsewhere, change it on every site.
What to Do If the Hacker Locked You Out Completely
If the standard flow fails, try these in order:
- Retry the hacked account process from a previously used phone or laptop, on your usual home or office network.
- Check every email address you’ve ever used with Instagram. Old addresses often hold the notification you need.
- Ask friends to report the hacked account as impersonation. This can help if the hacker is scamming your followers.
- If you pay for Meta Verified, use its account support channel. Availability varies by country, so confirm it applies to you.
- Report the incident through the official Instagram Help Center and keep records of every request you submit.
Recovery can take from a few hours to several days or longer, depending on how much the hacker changed. Be cautious of anyone promising instant recovery.
Avoid Recovery Scams
Hacked users are prime targets for a second scam. Fake “recovery experts” on Instagram, Telegram, and WhatsApp often ask for upfront payment, your password, or a verification code, then disappear.
Instagram does not charge to recover an account through its official process. Never share a login code with anyone. The Federal Trade Commission’s guide on how to recover a hacked social media account also warns about these scams.
How Hackers Usually Get In
Knowing the cause helps you prevent a repeat attack. The most common methods are:
- Phishing. A fake login page or message tricks you into typing your password. Instagram’s phishing guidance covers how to spot these.
- Password reuse. Credentials leaked from another site are tried on Instagram.
- Malicious third-party apps. “Follower tracker” and similar apps can capture login access.
- SIM swapping. A criminal takes over your phone number to intercept SMS codes.
- Fake support messages or “copyright violation” DMs. These push you to click a link and log in.
Report the Hack and Protect Yourself Further
Reporting helps you, and it helps others too.
- In the US, file a report at IdentityTheft.gov or with the FBI’s Internet Crime Complaint Center (IC3) if you lost money or personal data.
- In Kenya, you can report cybercrime to the National KE-CIRT/CC or the Directorate of Criminal Investigations (DCI) cybercrime unit.
- Warn your contacts. Post from another account that yours was compromised, so followers don’t click hacked links.
If you use Instagram for business, a hack can mean lost sales, stolen customer data, and brand damage. Use our Cybersecurity Risk Score Calculator to see where your business is exposed. You can also read our guide to the best cyber insurance for small business to understand what coverage can offset after a breach.
Frequently Asked Questions
Can I recover a hacked Instagram account if the hacker changed my email and phone number?
Yes, often. Use instagram.com/hacked and verify your identity with a video selfie or other methods Instagram offers. It’s harder than a simple password reset, but it’s possible.
How long does it take to recover a hacked Instagram account?
A password reset can take minutes. Identity-verification cases can take several days or more. Time varies by case, so avoid submitting duplicate requests.
Can Instagram recover a deleted account?
Only in limited cases, and only if you act quickly. Report it immediately through the official recovery page.
How do I stop my Instagram from being hacked again?
Use a unique password, turn on authenticator-app 2FA, secure your email, and avoid third-party apps that ask for your login.
Is my Instagram hacked or just a glitch?
Check for unfamiliar login alerts, changed details, and posts you didn’t make. If you see any, treat it as a hack.
Need Help Recovering Your Instagram Account?
Some cases are stubborn, especially when the hacker changed every contact detail or the account is tied to your business. At JO-TECH Cyber shop, we help clients whose Instagram accounts are hacked, from guiding the official recovery process to locking down email, devices, and passwords afterward.
Contact JO-TECH Cyber for hands-on assistance.
Also hacked elsewhere? See our guides on how to recover a hacked TikTok account and what to do if WhatsApp is hacked.
