Was your Instagram hacked? Do this first
Updated: August 2026 · By César Cerrudo
When someone loses an Instagram account, they usually focus on recovering Instagram. But there's a more important question:
How did the attacker get in?
If you don't solve that, you can recover the account and lose it again.
1. Use only the official recovery mechanisms
Don't go looking for "hackers who recover Instagram accounts". A victim's desperation creates the perfect opportunity for a second scam.
2. Protect the related email
Immediately review the email account linked to Instagram. If the attacker also has access to your email, they can recover Instagram again even after you change the password.
3. Change reused passwords
If your Instagram password was the same as on other services, consider them potentially compromised. Especially:
- email;
- Facebook;
- work services;
- online stores.
The real fix is one unique password per service.
4. Review sessions and devices
After regaining control, sign out of any session you don't recognize.
5. Check for modified information
Verify:
- email address;
- phone number;
- recovery methods;
- connected apps;
- profile information.
6. Warn people if the attacker contacted others
An attacker can use your reputation to attack the people you know. For example:
The goal may be to turn one hacked account into ten new victims.
7. Turn on additional authentication
After recovering the account, protect it with a second factor.
An attack on a social network rarely ends at that social network. Always think about which other accounts could be connected.
Want to learn how to protect all your accounts, your family and your business?
DOWNLOAD A HACKER'S SECURITY GUIDE FREE →