Social Media Security Tutorial #01 How to Recover a Hacked Instagram Account in 2026: Step-by-Step Guide
Have you opened Instagram only to discover that your password no longer works? Maybe your email address has changed, your phone number is no longer connected, or your friends are receiving strange messages from your profile. If this sounds familiar, your Instagram account may have been hacked.
Losing access to your Instagram account can be frustrating, especially when it contains years of photos, conversations, followers, or important business contacts. The situation becomes even more stressful when a hacker changes your login details and prevents you from signing in.
But don’t panic. There are official recovery methods you can try, even if your password has been changed or you can no longer access your registered email address or phone number.
In this guide, you’ll learn how to recover a hacked Instagram account step by step, what to do when a hacker changes your email or password, how identity verification works, and how to protect your account after regaining access.
The goal is simple: help you understand what to do next without wasting time on fake recovery services or risky shortcuts.
Quick Answer: How to Recover a Hacked Instagram Account
If you believe someone has hacked your Instagram account, start with these steps:
- Open Instagram’s official recovery page: https://www.instagram.com/hacked/
- Choose the option that best describes your account problem.
- Enter your username, email address, or phone number if requested.
- Follow the available recovery instructions.
- Check your email for legitimate Instagram security notifications.
- Once you regain access, change your password and review your login activity.
- Complete any identity verification Instagram requests.
- Enable two-factor authentication to help prevent future unauthorized access.
The exact recovery process depends on your situation. You may be able to reset your password immediately, or Instagram may require additional identity checks.
1. How to Know If Your Instagram Account Has Been Hacked
Before starting the recovery process, look for signs that someone else may be using your account.
Your Instagram Password Suddenly Stops Working
If your password worked previously but no longer allows you to log in, someone may have changed it without your permission.
However, a failed login can also happen because of a typing mistake, an outdated saved password, or another login problem. Try the official password recovery option before assuming the worst.
Your Email Address Has Changed
One of the clearest warning signs is a notification saying that the email address associated with your Instagram account has been changed.
If you did not make this change, someone may have gained unauthorized access.
Check your original email inbox for security notifications from Instagram. A message about an unauthorized email change may contain an option to reverse the change or secure your account.
Your Phone Number Has Been Removed
A hacker may change or remove your registered phone number to make account recovery more difficult.
If you can no longer receive login codes at your usual number, check the other recovery options available through Instagram.
Unknown Posts or Stories Appear on Your Profile
Have you noticed unfamiliar posts, stories, comments, or promotional links? These could indicate unauthorized access.
Take screenshots of suspicious activity if you need to document what happened.
Your Friends Receive Strange Messages
Hackers sometimes use compromised accounts to contact friends and followers.
They may request money, promote fake giveaways, advertise cryptocurrency schemes, or send suspicious links.
Warn your friends through another communication channel if you suspect your account is being used to scam people.
You Receive Unexpected Login Alerts
Instagram may notify you about unfamiliar login attempts or account changes.
Review these notifications carefully. Keep in mind that an unfamiliar location does not automatically prove hacking because internet providers and VPNs can affect location estimates.
If you see a device or session you genuinely do not recognize, take steps to secure your account.
2. Step-by-Step: Recover Your Hacked Instagram Account
The safest place to begin is Instagram’s official hacked-account recovery page.
Official recovery link: https://www.instagram.com/hacked/
Follow the instructions below.
Step 1: Open the Official Recovery Page
Open a trusted browser on your phone or computer and enter:
https://www.instagram.com/hacked
Make sure the address belongs to Instagram. Avoid recovery links sent by unknown people through direct messages, text messages, or unofficial websites.
Step 2: Choose the Problem That Matches Your Situation
Follow the options displayed on the page.
Depending on the available recovery flow, you may be asked to indicate that your account was hacked or that you cannot access it.
The available options can change, so follow the current instructions rather than relying on screenshots from older tutorials.
Step 3: Enter Your Account Information
Instagram may ask you to provide your username, email address, or phone number.
Use the information associated with your account before the hacking incident, if available.
If your username has changed, try another identifier that you previously used with the account.
Step 4: Follow the Recovery Instructions
If Instagram offers a login link or verification code, use the option you can safely access.
Check your email inbox and spam folder for legitimate recovery messages.
Never share your verification code with another person, even if they claim to work for Instagram.
Step 5: Complete Identity Verification if Requested
If standard recovery does not work, Instagram may offer an additional identity verification process.
Depending on your account and the available options, this may include a video selfie or other information to help establish that you own the account.
Follow the instructions displayed in the official app or website.
Step 6: Reset Your Password
Once Instagram allows you to regain access, create a strong, unique password.
Do not reuse the password that was compromised.
Step 7: Review Your Account Security
After logging in, check your email address, phone number, login sessions, connected accounts, and account settings.
Remove unfamiliar access and restore any information that was changed without your permission.
Important: Instagram account recovery is not guaranteed. Follow the official process and provide accurate information when requested.
3. How to Recover an Instagram Account When the Hacker Changes Your Password
A changed password is one of the most common reasons people lose access to their Instagram accounts.
The good news is that you may still be able to recover your account if you control the email address or phone number connected to it.
Try the Forgot Password Option
Open the Instagram app and go to the login screen.
Select the password recovery option, which may appear as “Forgot password?” or under another login-help label.
Enter your username, email address, or phone number and follow the instructions.
If Instagram sends a recovery link to a contact method you control, use it to regain access.
Use the Official Hacked-Account Recovery Process
If the ordinary password reset does not work, visit:
https://www.instagram.com/hacked
Follow the instructions that match your situation.
This is particularly important if you believe someone changed your password deliberately or accessed your account without permission.
What If the Hacker Changed Your Password and Two-Factor Authentication?
A hacker may enable their own two-factor authentication, making it harder for you to log in even if you know your old password.
Do not attempt to bypass security controls through unofficial tools.
Return to Instagram’s hacked-account recovery process and follow the available identity verification steps. If Instagram offers a recovery code or another supported verification method, use it only through the official login flow.
4. How to Recover Instagram Without Email or Phone Number
Losing access to both your registered email address and phone number can make recovery more difficult, but you should not immediately assume that your account is gone forever.
Try these steps.
Start With Instagram’s Hacked-Account Page
Visit https://www.instagram.com/hacked/ and follow the instructions for an account you can no longer access.
Instagram may provide additional recovery options depending on the account and circumstances.
Try a Device You Previously Used
If possible, use the phone, tablet, or computer you normally used to access Instagram.
A familiar device may help with account recognition, although it does not guarantee recovery.
Check Your Previous Email Inbox
Search for messages about changes to your Instagram email address or other security details.
If Instagram sent a notification about an unauthorized change, check whether the message includes an official option to reverse it.
Verify the sender and destination before opening any link.
Recover Your Email Account if Necessary
If someone also hacked your email account, try recovering it through your email provider’s official recovery process.
Change the email password, review active sessions, and check for unfamiliar forwarding rules or recovery details.
Securing your email can help protect Instagram and other accounts connected to it.
Use the Verification Options Instagram Provides
If Instagram offers identity verification, complete the process carefully.
Do not submit identity documents or personal information to independent recovery agents.
5. Instagram Hacked and Email Changed? Here’s What to Do
If a hacker changes the email address linked to your Instagram account, act as soon as possible.
The attacker may be trying to prevent you from receiving password reset links or security notifications.
Search Your Old Email Inbox
Look for an email notification about the change.
Instagram may send a security message explaining that your account email address was updated. In some circumstances, the message may include an option to reverse the change or secure the account.
If such an option is available, verify that the message is legitimate before following it.
Visit the Official Recovery Page
If you cannot reverse the change through the security notification, visit:
https://www.instagram.com/hacked
Follow the instructions for your account.
Secure Your Email Account
Change your email password if you suspect unauthorized access.
Enable two-factor authentication, check your recovery phone number, and sign out of unfamiliar sessions.
Check Your Other Accounts
If you reused the same password on other services, change those passwords as well.
Prioritize your email, financial accounts, and any other services that contain sensitive information.
6. How Instagram Video Selfie Verification Works
Some people who cannot recover their accounts through standard login methods may be asked to complete a video selfie verification process.
This process is intended to help Instagram determine whether the person requesting access is the account’s legitimate owner.
When Might Instagram Request a Video Selfie?
Instagram may offer video selfie verification when an account contains photos of you and additional identity confirmation is needed.
The available options depend on the circumstances, so not every account will receive the same verification request.
How to Complete the Process
- Open the official Instagram app or recovery flow.
- Follow the instructions to begin identity verification.
- Record the requested video in a well-lit location.
- Follow any instructions to move your head or position your face.
- Submit the video through the official interface.
- Check the secure email address you provided for updates.
Do not upload the video to third-party websites or send it to someone who promises to recover your account.
What If Your Video Selfie Is Rejected?
A failed verification attempt does not necessarily mean you have no other options.
Check Instagram’s response and see whether you can submit another video or follow an alternative verification process.
Make sure you follow the recording instructions carefully and use the official app.
For more information, consult the Instagram identity verification guidance in the Facebook Help Center.
7. What to Do If Instagram Recovery Codes Are Not Working
Recovery codes may fail for several reasons.
You might be using an expired code, requesting a code for the wrong account, or attempting to use a code that has already been used.
Try the following:
- Check that you entered the code correctly.
- Make sure you are using the latest code you requested.
- Check whether the code was sent to the correct email address or phone number.
- Follow the current instructions in the Instagram app.
- If you cannot receive a code, return to the official hacked-account recovery page.
Avoid repeatedly requesting codes in a short period.
Never give a recovery code to a person who contacts you unexpectedly. Someone asking for your code may be trying to take over your account.
8. What If You Are Still Logged In on Another Device?
If you can still open Instagram on a phone or tablet, you may be able to secure your account without starting from scratch.
Do not immediately log out of your remaining working session if you are unsure whether you can sign back in.
Instead, carefully review your security settings.
Change Your Password
Open the app’s settings and find Accounts Center or the password and security section.
Change your password to one that is unique and difficult to guess.
Review Login Activity
Look for the section that shows where your account is logged in.
Review the listed devices and sessions. Log out unfamiliar sessions once you are confident they are not yours.
Check Your Contact Details
Verify your email address and phone number.
Remove unauthorized information and make sure you retain a secure way to recover your account.
Review Connected Accounts
Check whether unfamiliar accounts have been linked through Accounts Center.
Remove connections you do not recognize after confirming that doing so will not interfere with legitimate access to your other accounts.
Enable Two-Factor Authentication
Set up an additional verification method so that a password alone is less likely to be enough for an attacker to access your account.
9. How to Remove a Hacker From Your Instagram Account
Regaining access is only one part of the process. You must also make it harder for the attacker to return.
Follow this security checklist after recovery.
Change Your Password Again if Necessary
If you suspect that someone may still know your new password, change it from a trusted device.
Choose a unique password that you have not used elsewhere.
Log Out of Unknown Sessions
Review login activity and end sessions you do not recognize.
If the attacker is still logged in, removing unauthorized sessions can help prevent continued access.
Restore Your Account Information
Check the following details:
- Email address.
- Phone number.
- Username and profile name.
- Connected accounts.
- Recovery and authentication settings.
Restore any unauthorized changes.
Remove Suspicious Third-Party Apps
Review applications and services that have permission to access your account.
Revoke access to unfamiliar or unnecessary services.
Check Your Recent Activity
Look for unfamiliar posts, comments, direct messages, follows, or profile changes.
Remove suspicious content when possible and warn affected contacts if the attacker sent fraudulent messages.
10. How to Protect Your Instagram Account After Recovery
Once you have recovered your account, take preventive measures to reduce the risk of another attack.
Use a Strong, Unique Password
Your password should not be the same as your email password or the password you use on other websites.
Consider using a password manager to generate and store unique passwords.
Avoid predictable passwords based on your birthday, name, or phone number.
Enable Two-Factor Authentication
Two-factor authentication adds an additional verification step when someone tries to log in.
Instagram offers supported authentication options that may include an authenticator app or text-message codes.
Where available, consider an authenticator app or passkey for stronger protection against certain phishing attacks.
Keep backup codes in a secure place if Instagram provides them.
Turn On Login Alerts
Review your notification and security settings.
Alerts about unfamiliar login attempts can help you identify suspicious activity earlier.
Keep Your Devices Updated
Install operating system, browser, and application updates.
Remove suspicious applications and browser extensions, especially if you suspect that your device may have been compromised.
If you believe malware is involved, use a trusted device to change your passwords.
Protect Your Email Account
Your email account is an important part of your Instagram recovery process.
Use a unique password, enable two-factor authentication, review active sessions, and verify your recovery details.
Be Careful With Direct Messages
Do not trust every message that claims to come from Instagram, a brand, or a friend.
Be especially cautious of messages threatening to disable your account unless you click a link or provide a verification code.
Open Instagram directly to review account notifications instead of trusting unexpected messages.
11. Common Instagram Hacking Methods You Should Know About
Understanding how accounts are compromised can help you avoid repeating the same mistakes.
Phishing Websites
A phishing website imitates a legitimate login page to steal your username and password.
A scammer may send a message claiming that your account violates copyright rules or will be disabled unless you verify it.
Always check the website address before entering login details.
Fake Giveaways
Some scammers promise free followers, prizes, verification badges, or advertising benefits in exchange for login information.
Legitimate promotions should not require you to reveal your Instagram password.
Password Reuse
If you use the same password on several websites, a breach on one service can expose other accounts.
Use a different password for Instagram and your email account.
Malicious Apps
Some applications and browser extensions request unnecessary permissions or attempt to steal personal information.
Only install software from reputable sources and review connected applications regularly.
Attackers may pretend to be friends, influencers, business partners, or customer support representatives.
They may ask for verification codes or pressure you to act quickly.
Never share your password or authentication codes with someone who contacts you unexpectedly.
12. What to Do If a Hacker Is Scamming Your Followers
A compromised Instagram account can be used to deceive people who trust you.
The attacker may send messages requesting money, promoting fake investments, or advertising suspicious products.
Take these steps:
- Warn your friends and followers through another trusted communication channel.
- Ask them not to send money or share personal information.
- Recover your account using Instagram’s official process.
- Remove unauthorized posts and messages where possible.
- Review your login activity and security settings.
- Report fraudulent activity through Instagram’s official reporting tools.
If someone has already sent money to a scammer, contact the relevant bank or payment provider promptly and report the incident to the appropriate authorities.
13. How to Recover a Hacked Instagram Business Account
If you use Instagram for a business, creator brand, or online store, an account takeover can affect your reputation and income.
In addition to recovering the account, review your business-related security.
Check Your Business Profile
Review your profile description, website link, contact details, and recent posts.
Restore any information the hacker changed.
Review Advertising Activity
If your Instagram account is connected to advertising tools, check for unfamiliar campaigns, charges, or payment changes.
Contact the relevant payment provider if you notice unauthorized transactions.
Secure Connected Meta Accounts
If your Instagram account is connected to Facebook or a Meta business portfolio, check those accounts for suspicious access as well.
Secure compromised accounts before relying on them for Instagram recovery.
Review Team Access
If multiple people manage your business account, review who has access and remove unauthorized users.
Ask legitimate team members to enable two-factor authentication and use unique passwords.
Notify Customers if Necessary
If the attacker sent fraudulent messages or published misleading promotions, inform affected customers through a trusted channel.
A clear warning can help protect your customers and preserve confidence in your business.
14. What If Instagram Disables Your Account After It Was Hacked?
Sometimes an attacker posts spam or violates Instagram’s rules while controlling a compromised account. The platform may then restrict or disable the account.
If this happens, read the message Instagram displays when you try to log in.
Follow any available review or appeal instructions.
If you believe unauthorized activity caused the restriction, explain the situation accurately through the official process.
Do not pay someone who claims they can guarantee account reactivation or bypass Instagram’s security systems.
Account recovery and account appeals may involve different procedures, so follow the instructions relevant to your specific situation.
15. How Long Does Instagram Account Recovery Take?
There is no guaranteed recovery time for every account.
Some users regain access quickly through a password reset. Others may need additional identity verification or support.
The process can depend on:
- Whether you can access your registered email address or phone number.
- Whether the hacker changed your contact details.
- Whether Instagram needs to verify your identity.
- Whether your account has been disabled or restricted.
- Whether you can complete the available security checks.
Check your secure email address for official updates and follow the instructions provided.
Avoid submitting repeated requests through unrelated websites or paying recovery agents to speed things up.
16. Instagram Account Recovery Scams: What to Avoid
When people lose access to their accounts, they often search online for someone who can help.
Unfortunately, scammers take advantage of this situation.
Avoid Guaranteed Recovery Promises
No independent recovery agent can guarantee that Instagram will restore your account.
Be suspicious of anyone who promises instant access or claims to have special tools for bypassing Instagram’s security.
A legitimate recovery process should not require you to disclose your password to a stranger.
A scammer who obtains your login or recovery code may be able to access your account.
Avoid Unofficial Recovery Websites
Use Instagram’s official recovery page and Help Center rather than websites that request payment or sensitive information.
Do Not Pay for Fake Support
Be cautious of accounts pretending to be Instagram employees or Meta support agents.
Use official Instagram interfaces to review your account and available support options.
17. Frequently Asked Questions
How can I recover my hacked Instagram account quickly?
Start at https://www.instagram.com/hacked/ and follow the official recovery instructions. If you still control your registered email address or phone number, use the available password reset or verification options.
Can I recover my Instagram account if the hacker changed my password?
Yes, recovery may still be possible. Use Instagram’s hacked-account recovery process and complete the verification steps available to you.
Can I recover Instagram without an email address or phone number?
Possibly. Instagram may provide additional recovery or identity verification options. Start with the official hacked-account page and follow the instructions for your situation.
What should I do if a hacker changes my Instagram email address?
Check your original email inbox for a security notification about the change. If Instagram provides an official option to reverse it, follow the instructions after verifying the message. Otherwise, use the hacked-account recovery page.
Can I recover Instagram without my old phone?
You may be able to recover your account using another supported verification method. Visit Instagram’s official recovery page and check which options are available.
Does Instagram use video selfie verification?
Instagram may request a video selfie to help verify identity in certain recovery situations, particularly for accounts containing photos of the account owner.
What if Instagram recovery codes do not work?
Check that you are using the latest valid code and that it belongs to the correct account. If you cannot receive a code, return to the official recovery process and follow the alternative options displayed.
Can hackers access my Instagram again after I recover it?
They may regain access if they still know your password, control your email, or have access through a compromised device or connected application. Change exposed passwords, end unfamiliar sessions, and enable two-factor authentication.
Is it safe to pay someone to recover my Instagram account?
Be cautious. People who promise guaranteed recovery may be attempting to steal your money or personal information. Use Instagram’s official recovery tools.
What is the official Instagram hacked-account recovery link?
The official recovery page is https://www.instagram.com/hacked/.
Always check the domain before entering account information.
Conclusion
Having your Instagram account hacked can be upsetting, especially when you lose access to your photos, messages, followers, and business contacts. However, there are official recovery options you can try.
Start by visiting Instagram’s hacked-account recovery page and following the instructions for your situation. Check your email for security notifications, use the available verification methods, and complete any identity checks requested by Instagram.
Once you regain access, change your password, review your login activity, remove unauthorized connections, and enable two-factor authentication. Secure your email account as well, because it may be essential for future recovery.
Most importantly, avoid fake recovery agents, suspicious links, and anyone asking for your password or verification codes.
Start your recovery here: https://www.instagram.com/hacked/
Taking these steps can help you regain control of your account and make it more difficult for someone else to access it again.
Official Resources
- Instagram hacked-account recovery: https://www.instagram.com/hacked/
- Instagram Help Center: https://help.instagram.com/
- Instagram identity verification guidance: https://www.facebook.com/help/1053588012132894/
Use these official resources for account recovery and security verification. Recovery options may vary by account and may change over time.
