If you cannot log in to Instagram, or you see posts, messages or follows you did not make, act quickly. A hacked account can often be recovered, even if the hacker changed your email address or password. This guide gives you a clear path for each situation, in the order you should try them.
Short answer: start with the password reset and the security email from Instagram. If those routes are closed, use the in-app support request and prove the account is yours. Then change your password, turn on two-factor authentication and check your account settings.
Act Fast: the First Three Steps
Speed matters because a hacker may change your recovery details, post spam from your account or message your followers. Do these three things first.
First, check your email inbox for a message from Instagram about a change to your account. Instagram sends a security email when your email address, password or phone number changes. That email often includes a link to undo the change. If you find it, tap the link straight away and follow the prompts to secure your account.
Second, do not click links sent by strangers who claim they can recover your account for a fee. Recovery is free through Instagram itself. Paid recovery services are often scams, and they may ask for your password or payment details.
Third, warn close contacts if the hacker is messaging people from your account. A short message on another channel can stop friends clicking a scam link sent in your name. You can also learn the warning signs in our guide on how to tell if your email was hacked, because email and Instagram accounts are often attacked together.
Start With the Password Reset
Open the Instagram app and go to the login screen. Tap Forgot password or Get help logging in, depending on your device. Enter your username, email address or phone number, then follow the link Instagram sends you.
If you still control your email or phone number, this is usually the fastest route back in. Choose a new password that you do not use anywhere else. Our guide to creating a memorable secure password explains how to make one that is both strong and easy to remember.
If the reset link never arrives, check your spam and junk folders. Also check whether you typed an old email address. Many people have more than one inbox, and Instagram sends the link to the address on the account.
If They Changed Your Email
This is the most worrying scenario, but it is not the end of the road. When an email address on an Instagram account changes, Instagram sends a message to the old address. That message usually says your email was changed and offers a way to reverse it.
Search your old inbox for recent messages from Instagram, including security or account change messages. Use the secure your account link in that message if it is still valid. Instagram can expire these links, so do this as soon as you spot the problem.
If that link has expired or you cannot find the message, go back to the login screen and choose the option for more help. Select the option that says you cannot access your email or phone number. Instagram will then ask you to submit a support request.
If They Changed Your Password
A changed password alone is easier to fix than a changed email address, provided you still control your email or phone number. Use the Forgot password route above and reset it from the link sent to you.
If you cannot receive the reset link, use the in-app help route instead. Tap Need more help on the login help screen and follow the steps. You may need to confirm your identity. Instagram may ask for details such as the email or phone number you originally used, or the type of device you usually log in from.
Do not create a second account and report the hacked one from it as your only step. Reporting helps, but it does not replace the recovery request. Use both routes if you need to, but make the support request your main step.
If They Turned On Two-Factor Authentication
Two-factor authentication is a second check after your password, usually a code from an authenticator app or a text message. If a hacker turned it on, your password alone will not get you back in.
First, check whether you have backup codes saved. Instagram offers backup codes when you set up two-factor authentication, and they work as one-time login codes. If you saved them in a password manager or a safe place, use one now.
If you have no backup codes, use the support request route. Instagram may ask you to verify your identity with a video selfie. This is a short video where you turn your head as instructed, so Instagram can compare it with photos on the account. Only submit this inside the official Instagram app or on the official Instagram help pages, never through a link sent by a stranger.
Be patient after you submit the request. Review times vary, and you may need to check your email for follow-up questions. Keep an eye on your inbox and reply promptly if Instagram asks for more detail.
Lock It Down After Recovery
Getting back in is only half the job. A hacker may have left a way back in, so run through this checklist before you relax.
Change your password again to a fresh, unique password. Turn on two-factor authentication with an authenticator app if you can, and save your backup codes somewhere safe. Check your email address and phone number in Accounts Centre and make sure they are yours.
Next, review login activity in Accounts Centre and sign out of devices you do not recognise. Check connected apps and websites and remove anything you do not use. Also check your profile, bio and linked accounts for changes the hacker may have made.
Finally, check your email account security too. If the hacker got into your email first, they could reset Instagram again. Change your email password, turn on two-factor authentication there and review recent activity.
Practical Tips That Help Recovery Go Faster
Use the device and network you normally use for Instagram when you submit a recovery request. Instagram uses these signals to judge whether the request is genuine.
Give clear, honest answers in the support form. If you are not sure of an old email address, say so, rather than guessing at a detail that could confuse the review.
Keep a record of what you submitted and when. If you need to follow up, you will know exactly which steps you already tried.
FAQs
Can I recover a hacked Instagram account without access to my email?
Yes, in many cases. Use the in-app support request and the identity check route. You will need to show that the account is yours, which may include a video selfie check.
How long does Instagram account recovery take?
It varies. A password reset can take minutes if you still control your email or phone number. An identity review can take longer, because a person or system must check your request. Check your email regularly for follow-up questions.
What should I do if the hacker changed my username?
Follow the same recovery steps. Your old username may help Instagram find the account, so include it in your support request if you remember it. Change it back once you regain access, if the name is still free.
Should I pay someone to recover my account?
No. Instagram recovery is free. Anyone who asks for payment, your password or a verification code is almost certainly running a scam.
Will Instagram phone me about my hacked account?
No. Instagram does not recover accounts by phone call. Be wary of calls, texts or emails that claim to be from Instagram support and ask for your login details or a code.
Conclusion
Losing your Instagram account feels alarming, but recovery is possible in most cases. Start with the password reset and the security email from Instagram. If your email or password was changed, use the in-app support request and prove the account is yours. Once you are back in, lock the account down with a unique password, two-factor authentication and a check of your connected devices. Those few minutes of work make a second hack far less likely.
