If you think your Instagram account was hacked, start with Instagram’s official compromised-account path rather than a general login checklist. The core Instagram hacked account recovery entry point is Instagram hacked account flow, where Instagram routes users who believe an account was hacked or compromised.
This guide is for the recovery stage: you cannot log in, your password may have been changed, or your email or phone number may no longer work. It is not a full two-factor authentication guide, and it does not cover backup-code regeneration. Exact prompts can vary by region, device, and account status, but the official path is the same goal: identify the account, choose the hacked or compromised account option, and verify ownership if Instagram asks.
What to do first if your Instagram account was hacked
When the problem is a suspected compromise, use Instagram’s hacked-account recovery flow first. This matters because a hacked Instagram account is different from an ordinary forgotten password problem. If an attacker changed your password, email address, or phone number, the normal reset route may not be enough to get you back in.
Your first move should be simple:
- Go to instagram.com/hacked.
- Choose the option that says your account was hacked or compromised.
- Follow the recovery prompts Instagram shows on screen.
- Verify ownership if Instagram asks you to do so.
- Stay inside the official flow instead of using third-party recovery services.
Instagram’s official Help Center article for a Hacked Instagram Account points users toward the hacked-account process. Use that route when you believe someone else has taken over the account, changed login details, posted without permission, or blocked your usual recovery methods.
If your issue is only a normal login mistake, a separate login-help path may be enough. But if you suspect compromise, treat it as an Instagram compromised account and begin with the hacked-account flow.
How to start Instagram’s hacked-account recovery flow
The official starting point is the hacked-account entry page. On web, open instagram.com/hacked in a browser. On mobile, you can also open that page from the same device where you use Instagram. Instagram may then continue the process in a browser or through app-style prompts, depending on your device and account state.
After the page loads, choose the hacked or compromised account option. From there, Instagram may ask you to identify the account, confirm available contact details, or continue into an ownership check. Do not worry if your screen does not match another person’s screenshots exactly. Instagram can change prompts by region, platform, and account type.
Use this short decision flow:
| What you see | What to do |
|---|---|
| You can identify the account and still have access to a recovery email or phone | Continue through the official prompts and complete the reset or verification step shown. |
| The password was changed and your usual reset option does not work | Stay in the hacked-account flow instead of repeatedly trying the normal password reset route. |
| The email or phone number was changed | Use the compromised-account path and be ready for Instagram to ask for ownership verification. |
| Instagram asks for additional verification | Complete the verification request exactly as shown in the official flow. |
The important point is not to jump between unofficial fixes. If the account is compromised, the supported recovery path is the official hacked-account flow and any verification steps Instagram presents inside that flow.
What Instagram may ask to verify ownership
Instagram may ask you to verify that you own the account before access is restored. This is especially likely when normal recovery details are missing, changed, or no longer trusted. Ownership verification is part of the reason hacked-account recovery can feel different from a standard password reset.
The exact verification method can vary. In some cases, Instagram may show a selfie verification step, but that prompt is not confirmed for every user or every region. If you see it, follow the instructions shown by Instagram. If you do not see it, do not assume something is broken; your account may be routed through a different verification path.
Keep the verification process consistent:
- Use the same account information Instagram asks for in the official flow.
- Do not submit information through recovery services, direct messages, or unofficial forms.
- Do not restart the process repeatedly if Instagram is already routing you into verification.
- Watch for prompts that explain where Instagram will send recovery or confirmation messages.
Recovery is not guaranteed, and Instagram may need enough information to connect you to the account. But if the account is truly compromised, verification inside the official hacked-account path is the correct place to continue.
If your email or phone number was changed
A changed email address or phone number is one of the most common blockers in Instagram account recovery. If an attacker changed the recovery details, the usual password reset route may send the reset link somewhere you can no longer access. That is why generic login troubleshooting can turn into a loop.
Use this decision tree:
- If you still have access to the original email or phone: follow the official prompts and use the recovery option Instagram provides.
- If the recovery email or phone was changed: go back to instagram.com/hacked, choose the hacked or compromised account option, and continue through the official recovery prompts.
- If Instagram asks for ownership verification: complete that step instead of trying to bypass it with repeated password resets.
- If the flow changes screens or asks for different details: follow the current prompt. Instagram’s exact wording can change by region and platform.
Do not use account-transfer tricks, paid recovery services, or third-party tools that claim they can force access back into your account. Those are not part of Instagram’s official recovery process and may put more personal information at risk.
Instagram hacked-account recovery on iPhone, Android, and web
The same recovery goal applies on iPhone, Android, and web: start the official hacked-account process, choose the hacked or compromised account option, and complete any ownership verification Instagram requests. The first action can differ slightly depending on where you begin, but the recovery path should stay inside Instagram’s official pages or app prompts.
| Platform | First action | What to expect |
|---|---|---|
| iPhone | Open instagram.com/hacked in a browser on your iPhone, or follow the official recovery prompt if Instagram routes you there from the app. | Prompts may continue in a browser or app-style flow. Wording can vary. |
| Android | Open instagram.com/hacked on your Android device, or continue from the official Instagram recovery prompt if shown. | The hacked or compromised account option should lead you into the recovery process. Exact screens can differ. |
| Web | Go directly to instagram.com/hacked in your browser. | Select the hacked or compromised account option and follow the web prompts. |
If you are moving between devices, try to stay consistent and use devices or browsers you normally use for Instagram when possible. However, the confirmed step is still the official hacked-account entry point. Do not rely on screenshots from old app versions as exact instructions, because Instagram can update the recovery flow.
What not to do while recovering a hacked Instagram account
During Instagram hacked login recovery, avoid actions that can make the situation more confusing or less secure.
- Do not pay third-party recovery services. Instagram’s official recovery happens through Instagram’s own flow and Help Center resources.
- Do not send passwords, codes, or identity information to strangers. Anyone asking for that information outside Instagram’s official process should not be trusted.
- Do not keep looping through a normal password reset if the email or phone was changed. Use the hacked-account flow instead.
- Do not make backup codes the main recovery plan. Backup codes are related to two-factor authentication, not the primary hacked-account recovery path.
- Do not assume every account will see the same verification prompt. Selfie verification may appear for some users, but it is not confirmed for all accounts.
If you later regain the password step but get stuck specifically because of two-factor authentication, that is a separate issue. For that adjacent problem, see our guide to Instagram backup codes not working. Keep that separate from the compromised-account recovery flow described here.
When to use Instagram Help Center resources
Use the Instagram Help Center as the official help hub when you need to confirm current wording, related login guidance, or region-specific recovery information. But do not replace the hacked-account flow with a vague search through help pages. If the account may be compromised, start with instagram.com/hacked and use the Help Center as supporting guidance.
The best order is:
- Start at the official hacked-account entry point.
- Choose the hacked or compromised account option.
- Follow the prompts Instagram shows for your account.
- Complete ownership verification if requested.
- Use the Help Center if you need official context or if the prompt sends you to a help article.
Recovery prompts can change, and some differences may be regional. That does not change the main recovery path: use Instagram’s official hacked-account flow, avoid unofficial services, and complete the verification steps Instagram provides. For most users searching for Instagram hacked account recovery, that is the safest and most direct place to begin.
Is this the same as a normal Instagram login problem?
No. A normal login problem may involve a forgotten password or a routine sign-in issue. A hacked or compromised account means someone may have changed your password, email, phone number, or account access. For that situation, start with Instagram’s hacked-account recovery flow rather than treating it as generic login troubleshooting.
What if the hacker changed my email or phone number?
If the email or phone number was changed, the normal password reset path may fail because the reset link or code may no longer reach you. Use Instagram’s official hacked-account flow, choose the hacked or compromised account option, and complete ownership verification if Instagram asks for it.
Will Instagram always ask for a selfie or identity check?
Not always. Instagram may require identity verification for some hacked-account cases, and selfie verification may appear for some users. The exact prompt and availability can vary by account, platform, and region, so follow the current instructions shown in the official flow.
Can I use backup codes to fix a hacked account?
Backup codes are a separate two-factor authentication topic. They may matter later if you regain the password step but cannot pass 2FA, but they are not the main recovery path for a hacked or compromised Instagram account. Start with Instagram’s official hacked-account flow first.