Losing the access to your Instagram account can be very stressful and also more complicated when a hacker changes your details like password, email address or phone number. However, being locked out does not simply mean that your profile is gone for good. Instagram offers recovery options that can help the users to verify their identity and regain access, even when their original login details are no longer working.




But the most important thing is to only use the social media platform’s official recovery process rather than relying on strangers on the internet who promise to restore hacked accounts.



How to recover a hacked Instagram account


The first step after being hacked should be to visit instagram.com/hacked, which is Instagram’s official account recovery portal. Select the option indicating that your account has been hacked and follow each of the instructions that show up after that.




You may be asked to enter your username, email address or phone number and request a login link or security code. If you can still access the email address or phone number linked to your profile, use the recovery link or code to log in.




You can also navigate to the Instagram login screen, tap ‘Forgot password?’ and follow the instructions to request a login link.




If you can get back into your account, change your password immediately and check the devices signed into your account. If you see any strange sessions there, sign out of them. This will stop the hacker from using your profile.



What if the hacker has changed your email and password?


If the attacker has replaced your registered email address, check your original inbox for a security notification from Instagram. Emails sent from security@mail.instagram.com about an unauthorised email change may include a 'Secure my account' or a reversal link that lets you undo the change.




Act quickly if you find such a message, as it may offer a way to recover your account without relying on the hacker’s new contact details.




If you can no longer access the email address or phone number associated with your profile, follow the additional recovery instructions on Instagram’s hacked-account page. The platform may ask you to complete an identity check, including recording a video selfie that can be compared with photographs on your account.




Users whose Instagram accounts are linked to Facebook can also try logging in through Facebook, but for that they should still have secure access to that account.



What to do immediately after getting your account back


Recovering your profile is only the first step because once you’re back in your account, do this:



Change the password: Ensure that you use a strong, unique password that you have not been using for other accounts.



Turn on two-factor authentication: This adds an extra layer of security if someone is trying to log in by requiring a second verification.



Remove unknown devices: Go to Accounts Center > Password and security > Where you're logged in. If there are any session that seem unrecognisable then log out of them.



Review connected apps: Remove access for third-party apps that you don’t use or trust.



Secure your email account: Change its password and turn on two-factor authentication, especially if you think it may have been compromised, too.




If the hacker has posted something suspicious or sent messages to the people from your profile, delete the unauthorized activity and inform your followers. Warn them not to click on any kind of suspicious links or respond to requests for money sent from your account.



Beware of fake Instagram recovery services


Those who lose access to their accounts may be tempted to turn to recovery agents who advertize their services on social media or via online searches. But these offers can leave victims vulnerable to further scams.




Don’t pay anyone who guaranties or promises instant recovery. Never give your password, one-time passwords (OTPs) or backup codes to anyone claiming to be from Instagram.




The safest thing to do is use Instagram’s official recovery tools and follow the verification steps the platform asks for.