Recovering your Instagram account depends on the nature of the hack itself so we are going to cover a few different things you can do to effectively recover your account.

If you’ve done some of the methods below, ignore them and try the rest.

Note: We shared the methods below on our website with more details, so if you require more information, feel free to check it out. Here’s the link.

That said, here’s what you should do:

1. Check your email for a message from Instagram

Instagram automatically sends notification emails from security@mail.instagram.com whenever someone changes your account's email address or password. If you received that email, look for the "secure my account" option at the bottom of the email. Clicking this can help you reverse unauthorized changes.

If the hacker changed additional account details beyond your email address, you'll need to request a login link or security code from Instagram to proceed with recovery.

2. Request a login link directly from Instagram

https://preview.redd.it/9zdskl52p44g1.png?width=591&format=png&auto=webp&s=520dc93c660413bdc3591d0285a0f0eb22c8c1dc

1. On the login screen, tap "Forgot password?"
2. Enter your username, email address, or phone number
3. Click "Send login link"
4. Complete the captcha verification
5. Check your email or SMS for the login link and follow the instructions

If you can't access your account credentials, visit Instagram's Hacked page for specialized support.

3. Ask for a security code

If the login link method doesn't work, request support through your mobile device. Enter a secure email address that only you can access. Instagram will send you an email with detailed instructions for next steps.

4. Use your one time log in codes

If you've turned on two-factor authentication, then you should have your list of one time security codes. The platform generates them so you can log back in when you forget your password or lose access to your 2FA authenticator app. Use them to regain control of your account and kick out the intruder.

5. Verify your identity with Instagram

For accounts without profile photos of you, you'll receive an auto-response email from Meta's Support Team. They'll ask you to verify your identity by providing the email address or phone number you used during sign-up, along with the type of device you used when creating your account (such as iPhone, Android, iPad, or others).

For accounts with profile photos, Meta requires a video selfie verification. You'll need to record yourself turning your head in different directions, which helps Meta confirm you're a real person and verify your identity.

6. Use antivirus software to clean your computer

There are some cases in which people keep getting hacked regardless of how many times they change their password and they have 2FA enabled. In this case, hackers aren’t stealing your login information, they are taking your session tokens instead.

Session tokens are what allow browsers to know you are already logged in to your account. That way they don’t have to keep asking you to log in every time you visit the website.

The way hackers do this is by using infostealers (a type of malware) that allow them to hijack your session tokens, thus bypassing your password and 2FA. The way to deal with this is to:

1. Remove the malware from your computer first (use an effective antivirus like r/BitDefender).
2. Clean up all your browser cookies.
3. End all sessions on your Instagram account. To end all Instagram sessions through Meta, go to “Accounts Center” on Instagram, navigate to “Password and security,” then “Where you're logged in.” From there, select your Instagram account, click “Select devices to log out,” choose “Select all,” and confirm to log out of all sessions.
4. Change your password, cancel your current backup codes and generate a new set. Here’s an Instagram guide on how to do it.

This will make it so the intruders lose access to your account for good.

7. Acquire Meta verified

If none of the methods above work, get Meta verified on a different account and get in contact with a Meta employee. Explain what happened so they can redirect you to the right department. Then they’ll open a support ticket to help you regain control.

You’ll need your account username or profile link and a way to prove you are who you say you are (an official ID). Just follow the instructions they provide you.

You can learn more about Meta verified here: https://help.instagram.com/732454618598400

That’s it. That should help you regain access to your Instagram account.

Now, if you’d like to protect your account so you never get hacked again, read this thread for specific things you can do right now: https://www.reddit.com/r/Spikerz_Security/comments/1p8xcuj/how_to_protect_your_instagram_account_from_hacking/

Also, if you think there’s something we are missing, share it below. 👇 We’ll edit this post with all the necessary information to help as many people as possible.