How do I recover a hacked Instagram account?
By Bridget · Updated May 2026 · Reviewed by Locket Security Team
★ the short answer
To recover a hacked Instagram account, first secure the email tied to it and change that password. Then use Instagram's “My account was hacked” flow from the login screen to request a recovery link or verify your identity with a video selfie. Lock connected apps and turn on 2FA the moment you regain access.
How do I know my Instagram account was hacked?
You've likely been hacked if you get a login or email-change alert you didn't request, your password suddenly stops working, or friends report DMs and posts you never sent. Instagram emails every security change to your original address, so check that inbox before assuming you're fully locked out.
Act on the “your email was changed” notice fast: it contains a “revert this change” link that's only valid for a short window. Clicking it can undo the takeover before the attacker finishes locking you out.
What should I do in the first hour after being hacked?
In the first hour, secure the email address connected to Instagram: change its password and turn on 2FA there first. Then attempt Instagram's recovery flow. Securing the email matters most: if the attacker still controls it, they can reset your Instagram password again the moment you regain access.
How do I use Instagram's hacked-account recovery form?
From the login screen, tap “Forgot password?” then “Need more help?” to reach “My account was hacked.” Instagram emails a recovery link or asks for a video selfie to confirm your identity. Submit from a device and Wi-Fi network you've used with the account before. It speeds approval.
If you have a verified or business account, you may also have access to Meta's dedicated support channels. For business accounts, check whether the account is linked to a Meta Business Suite or Facebook Page, because recovery sometimes runs through there.
How do I lock the account back down after recovery?
Once you're back in: reset the password to something unique, switch 2FA to an authenticator app (not SMS), review and remove unknown logged-in devices and connected third-party apps, and confirm the email and phone number on file are yours. Save new backup codes somewhere offline.
★ quick steps
Recover a hacked Instagram account
- 1
Change the password on the email tied to Instagram and turn on 2FA there before anything else.
- 2
Open Instagram's recovery flow
On the login screen tap Forgot password → Need more help → My account was hacked.
- 3
Submit a video selfie or recovery code when prompted, from a device you've used with the account.
- 4
Reset the password, enable authenticator-app 2FA, and remove unknown devices and linked apps.
Frequently asked
- An attacker can request deletion, but Instagram holds accounts for 30 days before permanent removal. Filing a recovery request within that window can reverse the deletion, so act quickly rather than assuming the account is gone.
- Self-service recovery usually takes 1–3 days. Complex takeovers where the email and 2FA were both changed can take longer; specialist help can shorten it to roughly 48–72 hours by working through verified support paths.
- Resubmit the form from a known device, keep every confirmation email, and avoid creating duplicate reports (they reset your place in the queue). If your account is monetized, a service like Locket Security can escalate through trust-and-safety contacts.
Sources
Want a human in your corner?
Locket Security helps creators recover, lock down, and protect every account they monetize, without the enterprise jargon.
See how Locket helps ★Keep reading
How do I turn on 2FA for Instagram?
Two-factor authentication is the single biggest thing standing between a creator and an account takeover. Here's the exact path to switch it on the right way.
How do I recover a hacked TikTok account?
What to do when you lose access to your TikTok: the exact in-app report path, how to verify ownership, and how to keep the attacker from coming back.
Someone is impersonating me on Instagram. What do I do?
Impersonator accounts scam your followers and damage your brand. Here's how to report one, get it removed, and warn your audience fast.
How do I lock down my Instagram account?
A run-through of every Instagram security setting that matters for creators. Do these once and you've closed the doors most takeovers walk through.