# Can’t access your hacked Instagram account? Start recovery

By HeyMark · Updated October 28, 2026

Did someone change your Instagram email or password, leaving you unable to sign in? Before creating another profile, check what you still control: your previous email, phone or an existing session may affect the recovery route. This tutorial takes you through the official options so you can follow the ones Instagram offers for your account.

## Start with the account you need to recover

Open [instagram.com/hacked](https://www.instagram.com/hacked/) in a mobile or desktop browser and choose the problem that matches your situation. Have the affected account’s username ready. If you manage several profiles, check which one you are recovering before entering details.

Instagram says recovery options depend on the account type. An identity check or support option offered to someone else may not appear on your screen. Its [hacked-account guidance](https://www.facebook.com/help/instagram/149494825257596/?locale=en_US) explains the available routes.

## If Instagram notified you about an email change

Look in your previous inbox for an email from **security@mail.instagram.com** about the change. Instagram says you may be able to reverse it through **secure my account**. Use that option when the message concerns a change you did not make.

If the password also changed and that route does not restore access, continue with a login link or the alternatives in the official recovery flow. Reversing the email change alone does not prove that you have regained full control.

## Request a login link when you still control that contact method

1. On the sign-in screen, select **Forgot password?**.
2. Enter the profile’s username, email or phone number and request **Send login link**.
3. Complete Instagram’s verification prompt and open the link delivered by email or SMS.
4. Follow the account-specific instructions. If you no longer control those contact methods, return to the hacked-account flow and use its available alternatives.

A login link does not establish that you can bypass a later authenticator-code prompt. If you do not have that code, continue with the help options Instagram actually shows.

## If Instagram asks you to verify your identity

When login-link recovery fails, Instagram may offer support from a mobile device. Provide a secure email address that only you can access for the next instructions. Depending on the profile, it may request registration details or a video selfie. Follow the request for your case rather than assuming everyone receives the same method.

After signing in again, confirm the contact email and phone, change the password, enable two-factor authentication, and review unfamiliar linked accounts or apps. Successful sign-in to the correct profile confirms restored access; reviewing those settings helps you regain control as well. After submitting a support request, check the secure email you provided for Instagram’s next steps.

## See it on your own accounts.

Connect Instagram, TikTok, Facebook, LinkedIn or YouTube and use HeyMark free for 7 days. Mark answers in your voice, and you approve what goes out.

[Start free](https://app.heymark.ai) · [See pricing](https://heymark.ai/en/pricing/)

## Keep reading

- [Check your Instagram Account Status](https://heymark.ai/en/solutions/instagram-account-status/): Check whether Instagram may recommend your public account to non-followers, find flagged content or features, and request a review when Instagram offers the option.
- [Restore deleted Instagram content](https://heymark.ai/en/solutions/restore-deleted-instagram-content/): Find deleted Instagram photos, videos, Reels and Stories in Recently Deleted and restore them. Check the time limits and learn what happens to messages.

## Developer and agent resources

- [HeyMark MCP documentation](https://heymark.ai/en/mcp/)
- [llms.txt](https://heymark.ai/llms.txt)
- [Full site content for language models](https://heymark.ai/llms-full.txt)
- MCP protocol endpoint: `POST https://mcp.heymark.ai`
- OAuth protected-resource metadata: [/.well-known/oauth-protected-resource](https://mcp.heymark.ai/.well-known/oauth-protected-resource)
- MCP server card: [/server-card](https://mcp.heymark.ai/server-card)