Instagram account hacked? What to do, step by step (2026)
If someone got into your Instagram, the first hour matters. Don't panic, and don't pay anyone who DMs you offering help. Here is the order that works best, using only Instagram's own tools.
1. Lock your email first
Most Instagram hacks start with, or end with, the email account. If the hacker can read your email, they can keep resetting your Instagram password. Change your email password now and turn on 2-step verification for the email itself.
2. Look for the "your email was changed" message
When a hacker changes the email on your account, Instagram usually sends a message to your old address. Search your inbox (and spam) for Instagram messages about an email or password change. If the message offers to revert the change or secure your account, that is often the fastest way back. Instagram explains this here:
What to do if the email for your Instagram account was changed
Not sure an email is real? Inside the app, Instagram shows the emails it really sent you in Accounts Center. A message that isn't there is fake. Review recent emails sent from Instagram
3. Use instagram.com/hacked
This is Instagram's official recovery page for hacked accounts. Open it on a phone or computer you've used for Instagram before, ideally on your usual Wi-Fi. Pick the option that fits, enter your username or the email/phone on the account, and ask for a security code.
instagram.com/hacked If you think your Instagram profile has been hacked
4. No access to the email or phone? Use the identity check
If the hacker changed both, look for "Can't access this email or phone number?" in the flow. Instagram may ask for a short video selfie, which it compares with photos on your account. It only works if the account has clear photos of your face. Do it in good light, slowly, once.
Why you might be asked to upload a video selfie to confirm your identity on Instagram Lost access to email or phone number linked to Instagram account
5. Once you're back in, lock it down
- Change your password to a new one you've never used.
- Check "Where you're logged in" and log out every device you don't know.
- Fix the email and phone in Accounts Center.
- Turn on two-factor authentication with an authenticator app, and save your backup codes.
- Delete anything the hacker posted, and tell followers you're back.
View your recent Instagram login activity Use an authentication app for two-factor authentication on Instagram
What NOT to do
- Don't pay "recovery experts" in comments or DMs. Most are scams. Only Instagram can restore an account.
- Don't send your password, login codes or ID to anyone in a message.
- Don't hammer the recovery flow 20 times in an hour. It can lock you out of the flow for a while. One careful try, then wait.
Avoid getting scammed on Instagram
Get the plan for your exact case
5 quick questions → your steps in the right order, with Meta's official links. First steps free. No password needed.
Start the free quiz