# How to start recovering your hacked Facebook account

By HeyMark · Updated October 28, 2026

Did you find Facebook messages you did not write, or receive an alert that someone changed your account email? If someone took over your profile, start with account recovery. This tutorial helps you choose the official route based on whether you can still sign in or have lost access, before checking any Pages you manage.

## Identify the affected account

This tutorial covers your Facebook profile. A business Page has a separate process: if your profile remains accessible but someone took over a Page, follow [how to request recovery of a hacked Facebook Page](https://heymark.ai/en/solutions/recover-hacked-facebook-page/).

[Facebook’s official guidance](https://www.facebook.com/help/203305893040179?locale=en_US) lists unfamiliar posts or messages, profile-picture changes, unrecognized-login alerts and changes to contact information as possible signs. A sign-in problem alone does not identify its cause. Keep the notification you received so you can check what changed.

## Start the official flow on a familiar device

1. Open [facebook.com/hacked](https://www.facebook.com/hacked/).
2. Where possible, use a phone or computer you previously used to sign in to that profile. Facebook recommends this for recovery.
3. Follow the instructions for your account’s current state and identify the affected profile when prompted.
4. Complete the checks offered. If the screen shows where it will send a code or notice, check that you can access it; otherwise, follow the alternatives shown.

The flow adapts to the case. Buttons and verification methods are not identical for every account. If you are helping someone, they should carry out the process on their own familiar device; access to your profile does not establish that you can recover theirs.

## If the account email changed

Look in your previous inbox for Facebook’s email-change notification. Its guidance says that message contains a special link to reverse the change and secure the account. Check that the message is genuinely from Facebook before following it.

If you no longer control the email or phone, open the [recovery help for lost contact access](https://www.facebook.com/help/132243923516844?locale=en_US) and follow the alternatives for your situation. Changing the password alone does not establish that you have completed a later verification requirement. Read what the next screen asks you to do.

## If you can still sign in, check active sessions

In **Settings**, find **Where you’re logged in**. If you identify an unfamiliar session, select that device and log it out, as Facebook instructs. Review its account-security guidance after the incident too.

Check the outcome by signing in to the correct profile and reviewing the contact details and sessions that retain access. If recovery remains blocked, keep the exact message and continue with the help offered for your situation. If Facebook requests another check, complete it through the official flow and review the status again.

If Facebook says your personal profile is suspended, check [how to appeal a suspended personal account](https://heymark.ai/en/solutions/facebook-personal-account-suspended/) and the deadline shown in your notice.

## See it on your own accounts.

Connect Instagram, TikTok, Facebook, LinkedIn or YouTube and use HeyMark free for 7 days. Mark answers in your voice, and you approve what goes out.

[Start free](https://app.heymark.ai) · [See pricing](https://heymark.ai/en/pricing/)

## Keep reading

- [How to request recovery of your hacked Facebook Page](https://heymark.ai/en/solutions/recover-hacked-facebook-page/): Use Meta's official form if you recently lost a Facebook Page to hacking or a scam; first check whether you can access your profile.
- [How to give or remove access to your Facebook Page](https://heymark.ai/en/solutions/give-remove-facebook-page-access/): Invite someone to your Facebook Page with full, partial, or task access, then remove their permission when needed. Check what each option allows first.

## Developer and agent resources

- [HeyMark MCP documentation](https://heymark.ai/en/mcp/)
- [llms.txt](https://heymark.ai/llms.txt)
- [Full site content for language models](https://heymark.ai/llms-full.txt)
- MCP protocol endpoint: `POST https://mcp.heymark.ai`
- OAuth protected-resource metadata: [/.well-known/oauth-protected-resource](https://mcp.heymark.ai/.well-known/oauth-protected-resource)
- MCP server card: [/server-card](https://mcp.heymark.ai/server-card)