Facebook Account Recovery: Hacked or Locked Out?
Whether your account was hacked, you forgot your password, or you've lost access to your email and phone, there's a recovery path. Follow the steps below based on your situation.
Go to facebook.com/login/identify and search for your account by name, email, or phone. Facebook will send a recovery code to any linked email or phone you still have access to. If you've lost access to both, look for the option to verify your identity via trusted contacts or a government ID upload, depending on what Facebook offers for your account.
Standard Recovery (You Have Email/Phone Access)
- Go to the Facebook login pageClick "Forgotten password?" below the password field.
- Search for your accountEnter the email, phone number, or full name associated with the account.
- Select the account from the resultsIf multiple accounts match, confirm which one is yours by checking the profile photo/name shown.
- Choose how to receive your reset codeFacebook will list the email(s) and phone number(s) linked to the account — pick one you can access.
- Enter the code you receiveCheck the relevant inbox or messages app.
- Create a new passwordChoose a strong, unique password not used on other accounts.
My Account Was Hacked — What Now?
If you can still log in but notice unfamiliar posts, messages, or settings changes:
- Change your password immediatelyGo to Settings & Privacy → Settings → Password and Security → Change Password.
- Check "Where You're Logged In"Under Password and Security, review active sessions and log out any you don't recognize.
- Enable two-factor authenticationThis prevents the same access method from working again, even if your password is known.
- Review recent account activityCheck for unauthorized posts, messages sent, or changes to your email/phone/recovery info, and revert anything suspicious.
- Report the compromise to FacebookUse the "My Account Is Compromised" option, accessible from the Help Center or directly at facebook.com/hacked.
Lost Access to Both Email and Phone?
If you can't receive a recovery code through any linked method, Facebook offers additional identity verification options, which may include:
- Trusted Contacts — if you set these up previously, friends you designated can provide a recovery code on your behalf
- Identity confirmation — uploading a government-issued ID for Facebook to verify your identity against the account name
- Alternate email entry — providing a new email address Facebook can use to contact you about the recovery, even if it's not currently linked to the account
These options appear progressively during the recovery flow at facebook.com/login/identify — follow the on-screen prompts after selecting your account, and choose "No longer have access to these?" if none of the listed recovery methods work.
Frequently Asked Questions
How do I recover my Facebook account if I lost access to my email and phone?
Go to facebook.com/login/identify, search for your account, and select "No longer have access to these?" when shown the linked recovery methods. Facebook may then offer trusted contacts or identity verification via ID upload, depending on your account.
How long does Facebook account recovery take?
If you have access to a linked email or phone, recovery typically takes just minutes. If identity verification via ID upload is required, review can take anywhere from 24 hours to several days depending on Facebook's current volume.
What should I do first if my account was hacked?
If you can still log in, immediately change your password, check "Where You're Logged In" to remove unfamiliar sessions, and enable two-factor authentication. If you can't log in, go to facebook.com/hacked and select "My account is compromised."
Can I recover my account if the hacker changed my email and phone?
Yes — use the "My account is compromised" flow at facebook.com/hacked rather than the standard password reset. This is specifically designed to handle cases where account recovery information has been changed by an unauthorized party.
What are Trusted Contacts and how do they help with recovery?
Trusted Contacts are friends you designate in advance (via Settings & Privacy → Settings → Password and Security) who can provide you with a recovery code if you're ever locked out. This only works if set up before you lose access.