Facebook Hacked? What to Do

If your Facebook account has been hacked, immediately change your password, log out of all active sessions on other devices, and check whether the email address or phone number tied to your account was also changed by the attacker.

Signs your account may have been hacked

Posts, messages or friend requests you never sent appear on your account.
Your profile picture, name or bio changed without your input.
You are suddenly logged out and your password no longer works.
Friends report receiving strange messages or links from you.
You get a login alert from a location or device you do not recognize.

What to do first if you can still log in

Change your password immediately, using a long, unique combination not used anywhere else.
Go to Settings, then “Security and login,” and click “Log out of all sessions.”
Check the email address and phone number on the account and correct anything the attacker changed.
Turn on two factor authentication under the same “Security and login” section.
Review recent login activity for unfamiliar devices or locations.

What to do if you are locked out completely

When you can no longer log in at all, Facebook still provides a recovery path, though it takes more steps.

Step	What to do
1	Go to facebook.com/hacked or the “Forgot password” link on the login page
2	Follow the prompts to identify your account by email, phone number or name
3	Choose to reset your password via a trusted email or phone number, if still accessible
4	If the attacker changed your contact details too, use Facebook’s identity confirmation process, which may ask for a photo ID

Securing your account afterward

Recovering access is only half the job; the account needs to be locked down properly to prevent it from being compromised again. Enable two factor authentication using an authenticator app rather than SMS where possible, since SMS codes can be intercepted through SIM swapping. Remove any unfamiliar apps or browser extensions connected to your account under “Apps and websites” in settings, and warn your friends not to click any links the hacker may have sent from your profile before you regained control.

Preventing it from happening again

Use a unique, strong password for Facebook that is not reused on any other site, since credential leaks from unrelated services are one of the most common ways accounts get hacked. Be cautious of phishing emails or fake login pages that mimic Facebook’s design, always check that you are on the real facebook.com domain before entering your password, and review your connected apps periodically to remove anything you no longer use or recognize.

What to tell friends and followers

Post a short, clear warning on your timeline once you regain control, letting people know any strange messages or links sent during the hack were not from you and should not be clicked. If the hacker used your account to message people directly asking for money or personal information, a public post alone may not reach everyone in time, so consider also messaging your closest contacts individually to make sure the warning actually gets seen.