Instagram hacked? How to get your account back

You’re probably here because you need to know how to get your hacked Instagram account back under your control. Our guide explains how to know if your Instagram was hacked, how to get a hacked Instagram account back under your control, and ways to protect yourself more generally from social media threats.

What do I do if my Instagram has been hacked?

If you can still access your Instagram account, change your password immediately. Then, look at your account information and correct any changes the hacker made, such as removing access to any unauthorized devices, third-party apps, or unknown email addresses. After that, turn on two-factor authentication (2FA) to make it harder for hackers to get back into your account.

Whether you’re a successful influencer or just love sharing pictures of your pets, knowing what to do if your Instagram gets hacked can help keep your personal information safe (and avoid losing a lifetime of photos and followers). A 2024 Gitnux report found that hacked Instagram accounts make up 27% of all social media hacks and are targeted more than any other social media accounts.
If you’re locked out of your Instagram account, keep reading to learn how to get back in.

How to get your hacked Instagram account back

If you’ve lost control of your account, follow these steps to minimize the chances of your account being lost for good. Swift action may help you recover your Instagram account before too much damage has been caused.

1. Check your email for a message from Instagram

Instagram sends an email from security@mail.instagram.com to the primary account email address every time a new device tries to sign into your account or someone tries to change the account email address or password.

That message will ask you if you made those changes and provide a link to secure your account if it wasn’t you. If you can get into your account after securing it, make sure that your email address and recovery phone number are still correct (and that they’re the only ones listed), then change your password immediately.

Tip: Using a password management tool like Norton Password Manager can enhance security by creating hard-to-break passwords, spotting weaknesses in saved logins, and adding Touch ID/Face ID or Android biometrics on your mobile devices to help you access your passwords quickly.

2. Request a login link directly from Instagram

Instagram will provide you with a login link once you prove it’s your account. There are unique steps for computer vs. mobile devices.

If you have an iOS device or Android app:

1. Select Forgot password? on the login screen to start the recovery process.
2. Enter your username, email address, or phone number, then tap Next.
3. Choose your email address or phone number to send the login link, then tap Next.
4. Tap the login link in your email or text message and follow the prompts to complete the process.

If you’re requesting help on desktop:

1. Select Get help logging in on the login screen.
2. Enter your username, email address, or phone number, then click Send login link.
3. Complete the Captcha to confirm you’re human, then click Next.
4. Click the login link that was sent to your email or text message (SMS) and follow the prompts to the login screen.

Once you regain access, secure your account against future hacking attempts by setting a more secure password and enabling 2FA.

3. Ask for a security code

A security code is similar to a login link, except it requires setting up 2FA on your account. If you’ve already enabled 2FA, you can choose Forgot password? on iOS devices or Get help logging in on Android devices, then request a new code.

Instagram then sends the code to your phone or your authenticator app, allowing you to log back in and secure your account.

4. Verify your identity with Instagram

If other methods to secure your account have failed, the Instagram Support team may request that you submit a selfie video of your face at different angles. They’ll match the video to pictures of you on your profile and provide you with a way to log back in and secure your account. If your account has no pictures of you, submitting a video selfie won’t help.

Instagram support may also ask other questions about your account to prove you’re the rightful owner. You might have to send them your phone number, the email address you used to create the account, and the kind of device that you used to sign up.

5. Try additional methods to access your Instagram account

If you have a Facebook Business account (and it connects to your personal Facebook and Instagram accounts), try contacting Meta Support through that account. You might get faster support through your business account rather than going directly through Instagram.

You can also use Meta’s Account Center to reset your password and secure your account. The Account Center is a hub where connected Facebook and Instagram account settings are accessible in one place. You can also use the Account Center to set up 2FA.

How can I tell if my Instagram account was hacked?

There are a few warning signs that someone hacked your Instagram profile or is trying to get access:

• You receive a verification email notification from Instagram.
  When you—or someone else—tries to log into your account on a new device or from an unusual geographic location, Instagram emails the address tied to the account and asks you to verify the login.
• You can’t log in.
  If you try to sign in and can’t, it could mean that someone successfully logged into your account and either changed your password, logged you out of all other sessions, or changed the associated email address.
• Strange posts show up on your profile.
  If photos, Stories, or Reels you didn’t post start appearing on your profile page, someone has likely accessed your account and posted them.
• There was an unauthorized account email change.
  Hackers can log into an account and change the email address to hide their tracks and prevent you from using 2FA. If you can still access the account, remove the hacker’s information immediately.
• You receive a suspicious login alert.
  If the app opens a pop-up window or sends a push message to your device asking if you recently logged in, it could mean someone is trying to hack your account. Check the message to see the location and time of the login. If it wasn’t you, follow the instructions on that page to secure your account before it’s too late.
• Friends or followers receive strange messages from your account.
  Scammers may pose as you and send messages containing malicious links to your friends and followers. These friends might contact you via other communication channels, like text, phone, or email, to let you know about the messages.

But what do you do if you don’t receive any warnings (or overlook them at the time) and find out you can’t get into your account?

Can I recover my Instagram account if it was deleted?

You might be able to restore your Instagram account if somebody deleted it, but it depends on whether the account was deleted or disabled—here’s the difference:

• The account was disabled.
  A temporarily disabled account can be re-enabled at any time. It will also be re-enabled after the time limit expires (if one was set).
• The account was deleted, not disabled.
  You cannot recover your Instagram account. Instagram permanently deletes an account and all its associated information after 30 days of a deletion request—until then, your information stays in backup storage. Deletion can only be done by you or someone with your password (and may take up to 90 days to complete), so if you lost access to your account and don’t want to lose your photos, take action immediately for any hope of regaining access.

If a hacker deleted or deactivated your account, you might not know whether you can restore it. Follow the instructions on the account recovery screen to try to restore your account as soon as possible.

How do Instagram accounts get hacked?

Different types of hackers have a lot of tricks up their sleeves when it comes to getting into other people’s social media profiles. Some of the most common methods are:

• Phishing: Phishing scams often start with someone sending an email containing false threats, malicious links, or attachments to try to get personal data or login information. Fake Instagram emails and accounts might ask you to double-check your login information or invite you to click a link to take a survey to get you onto their fake website.
• Smishing: Smishing is a type of phishing, but the scammer communicates through text messages or SMS (Short Message Services).
• Spyware: Some types of malware, such as spyware or keyloggers, are designed to access a device and monitor its activity. Clicking a link you don’t know or downloading an unsafe app could allow a hacker to access your Instagram account as easily as you can.
• Email hacks: If somebody hacked your email, the hacker could steal a lot from you, including financial account information, personal pictures, and more. Once they can get into your email, they can find other accounts to break into.
• Third-party apps: Third-party apps allow hackers a few avenues to access accounts. First, hackers can use an app as a backdoor into connected accounts if it isn’t secure. Hackers can also create apps that allow them to hack into people’s accounts when the victims start using the app.
• Weak passwords: Hackers can guess weak or reused passwords, especially if you use the names of pets or children. Hackers can look through your social media profiles to find that information or use social engineering tactics to trick you into giving up your username and password.

How can I protect my Instagram account from hackers?

Social media security doesn’t have to be a full-time job. By following these ten online security best practices, you can enjoy your online life without worrying as much about hackers.

 

1. Install scam protection tools.
   Consider using security software with anti-phishing features to help you identify and avoid malicious websites and scams. For example, Norton Genie offers an AI-powered scam detection tool that allows you to double-check whether a suspicious text, email, or web address you receive is real or fake.
2. Limit third-party app usage.
   Third-party apps are generally safe if they came from a trusted app store, but they can still leave you vulnerable to hacking. Only connect apps you trust to your Instagram. Revoke access to any app you no longer use to minimize potential security risks.
3. Use autosave features.
   Instagram’s autosave feature saves a copy of your photos to your camera roll. While it won’t save your followers or your captions in case your account is hacked and deleted, at least you won’t lose your photos.
4. Be mindful of what you share publicly.
   Limit the personal information you share on your profile. Hackers can use this information to launch social engineering attacks, impersonate you, and even guess weak passwords.
5. Report suspicious activity.
   If you see something strange happening with your account, report it to Instagram immediately. This helps them investigate and keep the platform secure.
6. Enable 2FA.
   Two-factor authentication strengthens the security of your accounts by using a second layer of security, like a code sent via SMS, to verify your identity and grant access to your account.
7. Set strong and unique passwords.
   Create strong and unique passwords for all your accounts to make it harder for hackers to crack them. A password manager can help you keep track of them all.
8. Check your login activity regularly.
   Instagram tracks the devices you use to log into your profile. Review these devices and remove any you don’t recognize.
9. Don’t click links from unknown sources.
   Links in texts, emails, and direct messages can open the door to malware and phishing attacks. If you don’t know who sent you a link, don’t click it.
10. Set login activity alerts.
    Get notified whenever your account is accessed from a new device. This can help you catch suspicious activity early on.

Protect against Instagram hackers

Protecting your privacy on social media is an important part of staying safe online. Norton 360 Deluxe features a built-in VPN to encrypt the personal information you send and receive online. Plus, it features an easy-to-use password manager to let you create and store secure passwords, and strong malware protection to keep your device safer against hackers.

FAQs about hacked Instagram accounts

Want to learn more about how Instagram hacks happen and what to do if you lose access to your account? Read on.

How do I secure a hacked Instagram account I can’t access?

In your Instagram app, look for the option to get help resetting your password and follow the instructions. You’ll receive an email from Instagram that you can use to sign back in. If that doesn’t work, request help from their support team.

Can an Instagram video call be hacked?

Hacking an Instagram video call is possible, but it’s extremely difficult. Instagram uses end-to-end encryption, adding a solid layer of protection to the video calls. But if a hacker has access to your account or you accept a call from them, they may be able to monitor your activity or attempt to learn more about you to crack your passwords and security questions.

Can I be hacked through Instagram DMs?

You can be hacked through Instagram DMs, but likely only if the scammer sends you a link to a phishing site, and you click it, resulting in a malware infection. To be safe, don’t click links that look strange or are from someone you don’t know and trust.

Can I contact Instagram support about a hacked account?

Yes. If you go to Instagram’s hacked account page, you can request support.

How long does it take to get your hacked Instagram account back?

It depends—if a hacker accessed your account without changing anything, you might be able to get back in immediately. If they log in and change your password and recovery options, it can take a few days to a few weeks for Instagram support to verify your identity and restore your access.

Why do people hack Instagram?

There are several reasons why someone would want to hack an Instagram account. They may do it to find more personal information about someone, to cause problems for someone, as part of a large-scale Instagram scam, or simply because the hacker wants to.

Why would someone impersonate me on Instagram and what can I do?

An impersonator on Instagram could be a scammer trying to trick your followers, or a fan mimicking you for fun. Report malicious accounts to Instagram and consider changing your profile details. For non-malicious ones, you can ignore them, request removal politely, or report a trademark infringement.