How to recover a hacked Instagram account

The short answer

Use Instagram’s “Get help logging in” flow to request a login link or security code, and if that doesn’t work, submit a video selfie to verify your identity.

How to tell if your account was hacked

You might notice one or more of these signs:

  • You can’t log in with your usual password
  • Your email or phone number was changed without your knowledge
  • There are posts, messages, or follows you didn’t make
  • You received an email from Instagram about changes you didn’t request

Step 1: Check your email

Instagram sends a notification to your original email when account details are changed. Look for an email from security@mail.instagram.com — it should include an option to revert the change. This is the fastest way to undo a hack.

If reverting didn’t work:

  1. Open the Instagram app and tap Get help logging in
  2. Enter your username, email, or phone number
  3. Tap Send login link
  4. Check your email or SMS for the link and follow it to reset your password

Step 3: Request a security code

If the hacker changed your email and phone number:

  1. Tap Get help logging in and enter your details
  2. Select I can’t access this email or phone number
  3. Follow the prompts — Instagram may ask you to record a video selfie to prove your identity
  4. This works best if your account has photos of your face

The video selfie review can take 1 to 3 business days.

Step 4: Report the hack to Instagram

If none of the above works:

  • Go to Settings > Help > Report a Problem from another account or a friend’s device
  • You can also visit the Instagram Help Center in a web browser and submit a hacked account report
  • Instagram may ask you to verify your identity with a photo of yourself holding a handwritten code

How to protect your account going forward

  • Turn on two-factor authentication in Settings > Security
  • Use a strong, unique password that you don’t reuse on other sites
  • Revoke access to any suspicious third-party apps in Settings > Security > Apps and Websites
  • Never click login links from unsolicited DMs or emails