Getting locked out of your Facebook account after a hack is a nightmare, but recovery is possible. A recent guide from hacked.com breaks down the essential steps to regain control, focusing on email recovery, two-factor authentication (2FA), and handling lockouts. Here's what you need to know to secure your profile and get back online.

Start with Email Recovery: Your First Line of Defense

If hackers have taken over your Facebook account, the first step is to use the email associated with your account. Facebook's recovery system allows you to request a password reset link sent to your registered email address. This is often the quickest way to reclaim access, provided the hacker hasn't changed your email.

Check your inbox for a message from Facebook with a secure link. If you don't see it, look in your spam or junk folder. The link expires quickly, so act fast. Once you click it, you'll be prompted to create a new, strong password. Make sure it's unique and not used on any other site.

Pro tip: If you no longer have access to the email on file, skip ahead to the account recovery form, which asks for details like your phone number or previous passwords.

Two-Factor Authentication: A Double-Edged Sword

Two-factor authentication adds an extra layer of security, but it can also lock you out if the hacker changed your 2FA settings. If you're still logged in on some devices, you can disable 2FA immediately. Go to Settings > Security and Login, and turn off any unfamiliar authentication methods.

If you're locked out entirely, Facebook offers a backup code option. These codes are generated when you first set up 2FA—hopefully you saved them. If not, you can request a new code via SMS if your phone number is still linked. In worst-case scenarios, you may need to verify your identity by submitting a photo ID to Facebook's support team.

Remember: 2FA is your friend, but only if you keep backup codes in a safe place. Consider using an authenticator app instead of SMS for better security.

Dealing with Lockouts: Step-by-Step Recovery

Facebook's account recovery process is designed to get you back in, but it can be tedious. Start by visiting Facebook's dedicated recovery page and entering your email or phone number. You'll receive a security code—enter it to proceed.

If you can't access those, Facebook will ask you to identify friends in photos or answer security questions. This is part of their "Trusted Contacts" feature, which you might have set up earlier. If you haven't, you'll need to prove your identity by uploading a government-issued ID.

What to Do After You're Back In

  • Change your password immediately to a strong, unique one.
  • Review active sessions and log out of any unknown devices.
  • Check your email and phone on file, and remove any that aren't yours.
  • Enable 2FA (or re-enable it) with a secure authenticator app.
  • Scan for malware on your devices to prevent future hacks.

Prevention: Don't Get Hacked Again

Once you've recovered your account, take steps to harden your security. Use a password manager to generate and store complex passwords. Turn on login alerts so you're notified of any new device logins. And be wary of phishing emails or fake login pages that steal your credentials.

Also, enable "Trusted Contacts" in your security settings—this lets friends help you recover your account if you're ever locked out. It's a small step that can save you hours of frustration later.

Key Takeaways

Recovering a hacked Facebook account is doable with the right approach. Start with email recovery, manage your 2FA, and follow the lockout procedures. Most importantly, after you're back in, lock down your account to prevent future attacks. Stay vigilant, and your Facebook will be safe.