What to Do If Your Instagram Gets Hacked (Step-by-Step Guide)

Your business’s Instagram account is an extension of your brand's image. Getting hacked, especially if the hacker shares inappropriate content or communicates with your customers, poses a real risk to your business.

The key is understanding what to do if your Instagram account has been hacked so you can act quickly. Follow these steps to recover and protect your account.

How Do You Know If Your Instagram Account Has Been Hacked?

It’s not always immediately obvious that your Instagram account has been hacked. However, the sooner you catch the issue, the more manageable it will be. 

Keep an eye out for red flags that could indicate hacking, such as:

• Log-in issues: You have trouble signing into your account. Instagram may even tell you that your password is incorrect.
• Password-change emails: You get a message from Instagram stating that your password has been changed when you didn’t change it (and neither did any other authorized users connected to your account).
• Strange posts or direct messages: You see activity on your account, such as posts on Instagram or DMs to other Instagram users, that you don't recognize.

Make sure any emails you receive about the security of your account come from security@mail.instagram.com. This is the email address Instagram will use to let you know if the email address or password linked to your account has changed. Messages from other email addresses are likely phishing scams trying to gain access to your account.

If you get a message from security@mail.instagram.com informing you that your Instagram account's email address or password has changed, and that change was unauthorized, click “revert this change” or "secure my account" and follow the instructions on the next page (but make sure you're on an official Instagram or Meta webpage at every step). Acting quickly can block the hacker and prevent any further damage.

What to Do First (If You Still Have Access)

If you can still log into your account after an Instagram hack, follow these steps:

• Change your password immediately: Go into your account settings and change your password to something entirely new. Avoid passwords that would be easy to guess, such as “password,” “12345,” or publicly available personal details, like your name.
• Enable two-factor authentication: Two-factor authentication is when you need two forms of identification to get into your account. On Instagram, that will typically be your password and access to your email account or phone. Instagram will send you a message with a code, which you then use to complete the log-in.
• Revoke suspicious third-party app access: In the Instagram app, go to "Settings," "Security," and then "Apps & Websites" to review the services that are connected to your account. Revoke permissions for any third parties that seem suspicious.
• Review recent log-ins: Open the security settings in the Instagram Account Center. Under "Security Check," view where your account is logged in. If there are any suspicious devices, you can log them out.

Recovering Your Account When You’re Locked Out

If you can’t get into your Instagram account at all, don’t worry. There are still steps you can take to protect your business, like:

• Use Instagram’s official recovery tools: Go to the "Hacked Instagram Account" page to report the issue.
• Request a log-in link or security code: On the log-in screen, select "Forgot password" or "Get help signing in." Enter your account details and wait for a message from Instagram, which should be sent to your email address or phone. Follow the on-screen instructions to regain access to your account.
• Follow Instagram's identity verification prompt: Instagram may ask you to verify your account by sharing a government-issued ID, getting help from two Instagram friends, or taking a video selfie.

Even if the hacker has changed your account's email address and phone number, you can still recover your account with Instagram’s help. Try the "forgot password" process first, and then choose an option like "I can't access this email or phone number" or "Need more help?" Follow the instructions from Instagram to complete the process.

Restoring and Securing Your Instagram Account After Regaining Access

Once you regain access to your account, reset the email address, phone number, and password associated with it. You want to ensure the Instagram hacker doesn’t have any remaining avenues into your account. It may also be worthwhile to unlink your Facebook and Instagram accounts to protect your Facebook account as well.

If the hacker shared any unauthorized posts or messages, delete them. The Instagram algorithm can penalize your account for posting irrelevant content. You may also want to notify your followers about what happened to explain the unusual content. A short post explaining that your account was hacked and that any strange messages did not actually come from your business can help you rebuild trust with your followers.

How to Prevent Your Instagram Account From Getting Hacked

Beyond strategies for what to post, one of the most important Instagram best practices is protecting your account against potential hacks. Apply these tips to reduce your risk of dealing with a hacked Instagram account:

• Use strong, unique passwords that combine lowercase letters, uppercase letters, numbers, and symbols.
• Rely on app-based two-factor authentication so hackers can’t get into your account with only your password.
• Regularly audit third-party connections and remove any that seem suspicious as part of your social media management efforts.
• Stay alert for phishing attempts, and interact only with Instagram security messages from security@mail.instagram.com.

Extra Protection for Business and Creator Accounts

A business's Instagram account is often even harder to secure than a personal account because a business may need to grant multiple workers access to its account. 

Take these key steps to solidify your defenses:

• Secure access to your Meta Business Suite by removing any unnecessary users and giving the remaining users only the access they need, no more.
• Add trusted email domains so that only users from your company can access the account.
• Enable professional security features by completing the business verification process in the Security Center.
• Keep your ownership documentation up to date with any changes.

What to Do If the Recovery Fails

If you can’t get back into your account through the traditional recovery methods, try:

• Resubmitting your recovery request to Instagram
• Monitoring your email for security alerts from the official Instagram security email address
• Escalating your account recovery request through Meta Support

Long-Term Instagram Security Practices

Once you fix your current Instagram security issues, make sure you establish new habits that will help prevent future problems, including:

• Routinely update your credentials so hackers can’t use an old password to get into your account.
• Monitor your log-in activity and take action right away if you see any attempts from suspicious devices or locations.
• Educate your team on proper account security, such as not sharing the account's password or interacting with suspicious emails that could be phishing attempts.

Get Expert Help Protecting Your Social Accounts

Being proactive about your account's security is the best way to protect your business from Instagram hackers. And if you do suspect that your Instagram account was hacked, initiate the recovery process as soon as possible.

Instagram should be a tool to grow your business, just like any other social media marketing channel. For help with your broader social media marketing efforts, contact Optimize Digital Marketing. Our experts will develop a customized social media strategy for your business and help you implement it.